CVE-2022-35717: OS Command Injection

Published Nov 3, 2022

Updated

"IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-"Force ID: 231361.

Affected Software

8 affected components

IBM InfoSphere Information Server=11.7

IBM AIX

Linux Linux kernel

Microsoft Windows

All of the following

IBM InfoSphere Information Server=11.7

Any of the following

IBM AIX

Linux Linux kernel

Microsoft Windows

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6829365

Event History

Nov 3, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-35717.

What is the severity of CVE-2022-35717?

The severity of CVE-2022-35717 is high.

What is the affected software for CVE-2022-35717?

The affected software for CVE-2022-35717 is IBM InfoSphere Information Server 11.7.

How can a locally authenticated attacker exploit CVE-2022-35717?

A locally authenticated attacker can exploit CVE-2022-35717 by sending a specially crafted request to execute arbitrary commands on the system.

Is IBM AIX, Linux kernel, or Microsoft Windows affected by CVE-2022-35717?

No, IBM AIX, Linux kernel, and Microsoft Windows are not affected by CVE-2022-35717.

Where can I find more information about CVE-2022-35717?

You can find more information about CVE-2022-35717 at the following link: [https://www.ibm.com/support/pages/node/6829365](https://www.ibm.com/support/pages/node/6829365)