CVE-2023-50955: IBM InfoSphere Information Server information disclosure
First published: Tue Feb 20 2024(Updated: )
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Information Steward | <=11.7 | |
| SAP Information Steward | =11.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-50955?
CVE-2023-50955 is a medium severity vulnerability that could allow an authenticated privileged user to obtain sensitive information regarding the web server's installation path.
How do I fix CVE-2023-50955?
To fix CVE-2023-50955, update to the latest version of IBM InfoSphere Information Server 11.7 by applying the appropriate patches provided by IBM.
Who is affected by CVE-2023-50955?
CVE-2023-50955 affects IBM InfoSphere Information Server version 11.7 used by organizations that manage data integration and warehousing.
What is the impact of CVE-2023-50955?
The impact of CVE-2023-50955 is that it may allow an authenticated privileged user to gather information that could facilitate further attacks on the system.
Is there a workaround for CVE-2023-50955?
Currently, there is no documented workaround for CVE-2023-50955; applying the patch is recommended for mitigation.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/ibm
- canonical/sap information steward
- version/sap information steward/11.7