CVE-2023-22877: IBM InfoSphere Information Server CSV injection
Published Aug 28, 2023
·Updated
IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368.
Affected Software
2 affected components
IBM InfoSphere Information Server>=11.7.0.0<11.7.1.0
IBM InfoSphere Information Server>=11.7.0.0<11.7.1.4
Remediation
Patch Available
Event History
Aug 28, 2023
CVE Published
via MITRE·12:34 AM
Data Sourced
via MITRE·12:34 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-22877.
2
What is the severity level of CVE-2023-22877?
The severity level of CVE-2023-22877 is high.
3
What is the affected software for CVE-2023-22877?
The affected software for CVE-2023-22877 is IBM InfoSphere Information Server 11.7.
4
How does CVE-2023-22877 impact the system?
CVE-2023-22877 allows a remote attacker to execute arbitrary commands on the system through improper validation of csv file contents.
5
How can I fix CVE-2023-22877?
To fix CVE-2023-22877, it is recommended to apply the necessary security updates provided by IBM.