PT-2023-27413 · Ibm · Ibm Infosphere Information Server

CVE-2023-40363 · Publicado 2023-11-18 · Atualizado 2023-11-29

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue allows an authenticated user to change installation files due to incorrect file permission settings.

Recommendations For IBM InfoSphere Information Server version 11.7, update the file permission settings to prevent authenticated users from modifying installation files.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2023-40363

Produtos afetados

Ibm Infosphere Information Server

Referências · 7

• https://osv.dev/vulnerability/CVE-2023-40363 · Aviso do Fabricante
• https://t.me/cvenotify/61540 · Publicação no Telegram
• https://t.me/cvenotify/60732 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-40363 · Nota de Segurança
• https://t.me/cvenotify/60695 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/263332 · Aviso do Fabricante
• https://ibm.com/support/pages/node/7070742 · Aviso do Fabricante