CVE-2021-29738: SSRF
IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 201302.
Other sources
IBM InfoSphere Data Flow Designer is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29738?
CVE-2021-29738 has been classified as a medium severity vulnerability due to its potential for server-side request forgery.
How do I fix CVE-2021-29738?
To fix CVE-2021-29738, you should apply the latest patches provided by IBM for InfoSphere Information Server version 11.7.
What type of attack can CVE-2021-29738 facilitate?
CVE-2021-29738 can facilitate unauthorized network requests, potentially leading to network enumeration or further attacks.
Who is affected by CVE-2021-29738?
CVE-2021-29738 affects authenticated users of IBM InfoSphere Data Flow Designer on version 11.7.
What kind of vulnerability is CVE-2021-29738?
CVE-2021-29738 is a server-side request forgery (SSRF) vulnerability.