CVE-2022-22373
First published: Thu Jun 30 2022(Updated: )
An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Infosphere Information Server | =11.7 | |
| IBM AIX | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| <=11.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2022-22373.
What is the severity level of CVE-2022-22373?
The severity level of CVE-2022-22373 is medium (5.4).
What is the affected software in CVE-2022-22373?
The affected software in CVE-2022-22373 is IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs.
How can this vulnerability be fixed?
IBM has released a patch to fix this vulnerability. You can find more information about the patch at this URL: http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FIBM+InfoSphere+Information+Server&fixids=is117-11713_JR64547_sapbw7xLoad-server_4403_*
Where can I find more information about CVE-2022-22373?
You can find more information about CVE-2022-22373 at the following URLs: - IBM X-Force ID: 221323 (https://exchange.xforce.ibmcloud.com/vulnerabilities/221323) - IBM Support Page: (https://www.ibm.com/support/pages/node/6600235)
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/event
- agent/description
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm infosphere information server
- version/ibm infosphere information server/11.7
- canonical/ibm aix
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- canonical/ibm infosphere information server, information server on cloud
- version/ibm infosphere information server, information server on cloud/11.7