PT-2023-1798 · Ibm · Ibm Infosphere Information Server

CVE-2023-25928 · Publicado 2023-02-20 · Atualizado 2023-03-02

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue is related to a cross-site scripting vulnerability in the web interface of the platform, which can be exploited by an attacker to execute arbitrary JavaScript code, potentially leading to credentials disclosure within a trusted session. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, thus altering the intended functionality.

Recommendations For IBM InfoSphere Information Server version 11.7, consider disabling the web interface or restricting access to it until a patch is available to prevent potential exploitation of the cross-site scripting vulnerability.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2023-01394

CVE-2023-25928

Produtos afetados

Ibm Infosphere Information Server

Referências · 6

• https://ibm.com/support/pages/node/6956598 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-25928 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/247646 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-01394 · Nota de Segurança
• https://t.me/cibsecurity/58597 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-25928 · Aviso do Fabricante