CVE-2022-22373 — Missing Authorization in IBM Infosphere Information Server

CWE-862 — Missing Authorization3 documents3 sources
Severity
5.4MEDIUMNVD
EPSS
0.1%
top 67.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedJul 1
Latest updateJul 2

Description

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jrx8-vcr5-x9fg: An improper validation vulnerability in IBM InfoSphere Information Server 11↗2022-07-02
▶
CVEList
CVE-2022-22373: An improper validation vulnerability in IBM InfoSphere Information Server 11↗2022-07-01
▶
CVE-2022-22373 — Missing Authorization in IBM | cvebase