CVE-2022-22373 MEDIUM

CVE-2022-22373

Vendor Ibm
Product InfoSphere Information Server
Published July 1, 2022
Last update September 16, 2024

CVSS base score

4.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:A/A:N/I:L/UI:N/C:L/AC:L/S:U/PR:L/RC:C/E:U/RL:O

What the vulnerability does

01Description

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323.

Key dates

02Disclosure timeline

July 1, 2022 CVE published
September 16, 2024 Record updated