IBM Security Bulletin: IBM InfoSphere Information Server has a network layer security vulnerability
Aug 1, 2017 10:00 am EDT
Categorized: High Severity
Share this post:
A network layer security vulnerability in InfoSphere Information Server can lead to privilege escalation or unauthorized access. An unauthorized user could intercept communication between client and server, and replay certain DataStage commands without privileged access.
CVE(s): CVE-2017-1467
Affected product(s) and affected version(s):
The following products, running on all supported platforms, are affected:
IBM InfoSphere Information Server: versions 9.1, 11.3, and 11.5
IBM InfoSphere Information Server on Cloud: version 11.5
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ve0xGs
X-Force Database: http://ift.tt/2uUJAOH
Archives
from IBM Product Security Incident Response Team http://ift.tt/2veMIY1