PT-2023-25946 · Ibm · Ibm Observability With Instana

CVE-2023-37404 · Publicado 2023-10-03 · Atualizado 2023-10-05

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Observability with Instana versions 1.0.243 through 1.0.254

Description The issue allows an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack.

Recommendations For versions 1.0.243 through 1.0.254, update to a version outside of this range to mitigate the risk of arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2023-37404

Produtos afetados

Ibm Observability With Instana

Referências · 8

• https://t.me/cvenotify/59051 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1709388424375881946 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-37404 · Aviso do Fabricante
• https://ibm.com/support/pages/node/7041863 · Aviso do Fabricante
• https://twitter.com/cracbot/status/1710075058323083428 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1709444485267050939 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-37404 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/259789 · Aviso do Fabricante