PT-2022-15398 · Ibm · Ibm Infosphere Information Server

Published 2022-07-01 · Updated 2023-08-08 · CVE-2022-22373

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue is related to improper validation, which may allow the creation of directories and files on the server file system. These files may contain non-sensitive debugging information, such as stack traces.

Recommendations For IBM InfoSphere Information Server version 11.7, update to a version that includes the fix for this issue to prevent potential exploitation.

Fix

Related Identifiers

CVE-2022-22373

Affected Products

Ibm Infosphere Information Server

References · 4

• https://osv.dev/vulnerability/CVE-2022-22373 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22373 · Security Note
• https://ibm.com/support/pages/node/6600235 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/221323 · Vendor Advisory