CVE-2023-23472

LOW

IBM InfoSphere DataStage Flow Designer - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/6988167

Scores

CVSS v3 3.1
EPSS 0.0034
EPSS Percentile 25.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-497
Status published
Products (1)
ibm/infosphere_information_server 11.7
Published Dec 11, 2024
Tracked Since Feb 18, 2026