IBM SPSS Statistics Denial of Service Vulnerability

CVE-2022-43855

What is CVE-2022-43855?

IBM SPSS Statistics versions 26.0, 27.0.1, and 28.0 present a vulnerability that allows a local user to create multiple files, potentially exhausting the system's file handle capacity. This situation may lead to performance degradation and denial of service, affecting the availability of the service for legitimate users. Organizations utilizing these versions should assess their exposure to this vulnerability and consider implementing mitigations as recommended by IBM.

References