PT-2023-2248 · Ibm · Ibm Instana

Shahid Parvez + 1 · Published 2023-03-03 · Updated 2025-03-02 · CVE-2023-27290

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions IBM Instana (IBM Observability with Instana) versions 239-0 through 239-2 IBM Instana (IBM Observability with Instana) versions 241-0 through 241-2 IBM Instana (IBM Observability with Instana) version 243-0

Description The issue is related to Docker-based datastores for IBM Instana, which do not require authentication, allowing an attacker within the network to access the datastores with read/write access. This could enable a remote attacker to read or modify data.

Recommendations For IBM Instana (IBM Observability with Instana) versions 239-0 through 239-2, consider implementing authentication for Docker-based datastores to restrict access. For IBM Instana (IBM Observability with Instana) versions 241-0 through 241-2, consider implementing authentication for Docker-based datastores to restrict access. For IBM Instana (IBM Observability with Instana) version 243-0, consider implementing authentication for Docker-based datastores to restrict access. As a temporary workaround, consider restricting access to the Docker-based datastores to minimize the risk of exploitation.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2023-02004

CVE-2023-27290

Affected Products

Ibm Instana

References · 9

• 🔥 https://exploit-db.com/exploits/51314 · Exploit
• https://bdu.fstec.ru/vul/2023-02004 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-27290 · Security Note
• https://ibm.com/support/pages/node/6959969 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/248737 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27290 · Vendor Advisory
• https://twitter.com/bugbreport/status/1896119501965644196 · Twitter Post
• http://packetstormsecurity.com/files/171770/IBM-Instana-243-0-Missing-Authentication.html · Note
• https://t.me/cibsecurity/59411 · Telegram Post