PT-2022-25512 · Ibm · Ibm Infosphere Datastage

Kajetan Rostojek + 1 · Published 2022-11-16 · Updated 2023-11-18 · CVE-2022-40752

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM InfoSphere DataStage version 11.7

Description The issue is related to a command injection vulnerability due to improper neutralization of special elements.

Recommendations For IBM InfoSphere DataStage version 11.7, update to a version that fixes the command injection vulnerability.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-40752

Affected Products

Ibm Infosphere Datastage

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-40752 · Security Note
• https://ibm.com/support/pages/node/6833566 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-40752 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/236687 · Vendor Advisory
• https://t.me/cvenotify/60659 · Telegram Post
• https://t.me/cvenotify/37923 · Telegram Post
• https://t.me/cvenotify/38102 · Telegram Post