CVE-2023-35898: IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.
Other sources
IBM InfoSphere Information Server could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-35898?
CVE-2023-35898 is a vulnerability in IBM InfoSphere Information Server 11.7 that allows an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer.
How can an authenticated user exploit CVE-2023-35898?
An authenticated user can exploit CVE-2023-35898 by leveraging the insecure security configuration in InfoSphere Data Flow Designer to obtain sensitive information.
What is the severity of CVE-2023-35898?
CVE-2023-35898 has a severity score of 6.5, which is considered medium.
How can I fix CVE-2023-35898?
To fix CVE-2023-35898, apply the patch provided by IBM for InfoSphere Information Server 11.7 using the following link: [https://www.ibm.com/support/pages/node/878310](https://www.ibm.com/support/pages/node/878310).
Where can I find more information about CVE-2023-35898?
You can find more information about CVE-2023-35898 on the following pages: [IBM Support Page](https://www.ibm.com/support/pages/node/7009205) and [IBM X-Force ID](https://exchange.xforce.ibmcloud.com/vulnerabilities/259352).