CVE-2023-50955: IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.
Other sources
IBM InfoSphere Information Server could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50955?
CVE-2023-50955 is a medium severity vulnerability that could allow an authenticated privileged user to obtain sensitive information regarding the web server's installation path.
How do I fix CVE-2023-50955?
To fix CVE-2023-50955, update to the latest version of IBM InfoSphere Information Server 11.7 by applying the appropriate patches provided by IBM.
Who is affected by CVE-2023-50955?
CVE-2023-50955 affects IBM InfoSphere Information Server version 11.7 used by organizations that manage data integration and warehousing.
What is the impact of CVE-2023-50955?
The impact of CVE-2023-50955 is that it may allow an authenticated privileged user to gather information that could facilitate further attacks on the system.
Is there a workaround for CVE-2023-50955?
Currently, there is no documented workaround for CVE-2023-50955; applying the patch is recommended for mitigation.