CNVD-2024-37064 — Vulnetix

CNVD-2024-37064 PUBLISHED CVSS 5.400000095367432 MEDIUM

IBM InfoSphere Information Server是美国国际商业机器（IBM）公司的一套数据整合平台。该平台可用于整合各种渠道获取的数据信息。 IBM InfoSphere Information Server存在服务器端请求伪造漏洞，经过身份验证的攻击者可利用该漏洞从系统发送未经授权的请求，从而导致网络枚举或促进其他攻击。

Risk Scores

CVSS 3.1

5.400000095367432

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
IBM	InfoSphere Information Server	11.7

Exploit Intelligence

https://www.ibm.com/support/pages/node/7158437 (circl)
https://exchange.xforce.ibmcloud.com/vulnerabilities/275774 (circl)

Timeline

Jun 30, 2024 CVE Published
Jul 2, 2024 CVE ID Reserved

References

https://www.ibm.com/support/pages/node/7158437 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/275774 vdb

Open in Interactive Console →