CVE-2023-35898: IBM InfoSphere Information Server information disclosure
First published: Mon Jul 17 2023(Updated: )
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Infosphere Information Server | =11.7 | |
| IBM AIX | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Ibm Infosphere Information Server | <=11.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-35898?
CVE-2023-35898 is a vulnerability in IBM InfoSphere Information Server 11.7 that allows an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer.
How can an authenticated user exploit CVE-2023-35898?
An authenticated user can exploit CVE-2023-35898 by leveraging the insecure security configuration in InfoSphere Data Flow Designer to obtain sensitive information.
What is the severity of CVE-2023-35898?
CVE-2023-35898 has a severity score of 6.5, which is considered medium.
How can I fix CVE-2023-35898?
To fix CVE-2023-35898, apply the patch provided by IBM for InfoSphere Information Server 11.7 using the following link: [https://www.ibm.com/support/pages/node/878310](https://www.ibm.com/support/pages/node/878310).
Where can I find more information about CVE-2023-35898?
You can find more information about CVE-2023-35898 on the following pages: [IBM Support Page](https://www.ibm.com/support/pages/node/7009205) and [IBM X-Force ID](https://exchange.xforce.ibmcloud.com/vulnerabilities/259352).
- collector/nvd-latest
- collector/nvd-index
- agent/references
- agent/type
- agent/author
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/remedy
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/last-modified-date
- agent/event
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm infosphere information server
- version/ibm infosphere information server/11.7
- canonical/ibm aix
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows