VulnerabilityAnalyzed

CVE-2023-50955

IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.

LOW 2.7EPSS 0.60%

Does this matter?

Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.

Description

IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.

CVSS 3.1: 2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.60% probability · 47th percentile
CISA KEV: Not listed
Weakness: CWE-36, CWE-22
Affected: ibm/infosphere information server
Source: psirt@us.ibm.com

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/275777VDB Entry
https://www.ibm.com/support/pages/node/7116610Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/275777VDB Entry
https://www.ibm.com/support/pages/node/7116610Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.