Improper Access Control in IBM InfoSphere Information Server
CVE-2022-22442

6.5MEDIUM

Key Information:

Vendor
IBM
Status
IBM Infosphere Information Server
Vendor
CVE Published:
3 November 2022

Summary

IBM InfoSphere Information Server 11.7 is subject to a security vulnerability that enables authenticated users to gain unauthorized access to sensitive information. This occurs due to deficiencies in access control mechanisms, allowing individuals with standard privileges to access data intended solely for higher-privileged users. This flaw poses a risk to data confidentiality and integrity, necessitating prompt remediation.

Affected Version(s)

IBM InfoSphere Information Server 11.7

References

https://www.ibm.com/support/pages/node/6829325

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.