Command Injection Vulnerability in IBM InfoSphere DataStage 11.7
CVE-2022-40752

9.8CRITICAL

Key Information:

Vendor

IBM
Status
Infosphere Datastage
Vendor
CVE Published:
16 November 2022

What is CVE-2022-40752?

IBM InfoSphere DataStage 11.7 contains a command injection vulnerability that arises from the improper neutralization of special elements in user input. This flaw could allow remote attackers to execute arbitrary commands on the host system, potentially compromising data integrity and confidentiality.

Affected Version(s)

InfoSphere DataStage 11.7

References

https://www.ibm.com/support/pages/node/6833566
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/236687
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.