CVE-2023-24960: IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333
Other sources
IBM InfoSphere Information Server could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-24960?
The severity of CVE-2023-24960 is high with a severity value of 7.5.
How can a remote attacker exploit CVE-2023-24960?
A remote attacker can exploit CVE-2023-24960 by sending a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Is IBM InfoSphere Information Server 11.7 affected by CVE-2023-24960?
Yes, IBM InfoSphere Information Server 11.7 is affected by CVE-2023-24960.
How can I fix CVE-2023-24960?
You can fix CVE-2023-24960 by applying the patch provided by IBM. The patch can be downloaded from the IBM support page.
Where can I find more information about CVE-2023-24960?
More information about CVE-2023-24960 can be found on the IBM X-Force ID page and the IBM support page.