CVE-2023-23472
IBM InfoSphere Information Server information disclosure
- State
- Published
- Severity
- 3.1 Low
- Published
- Dec 11, 2024
- Updated
- Dec 11, 2024
- Reserved
- Jan 12, 2023
Description
IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.1 Low | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N | ibm |
Weaknesses
- CWE-497 Exposure of System Data to an Unauthorized Control Sphere
Affected Products
| Product | Versions |
|---|---|
InfoSphere Information ServerIBM |
|
References
- https://www.ibm.com/support/pages/node/6988167vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.