IBM Security Bulletin: IBM InfoSphere Information Server has a network layer security vulnerability

Aug 1, 2017 10:00 am EDT

Categorized: High Severity

Share this post:

A network layer security vulnerability in InfoSphere Information Server can lead to privilege escalation or unauthorized access. An unauthorized user could intercept communication between client and server, and replay certain DataStage commands without privileged access.

CVE(s): CVE-2017-1467

Affected product(s) and affected version(s):

The following products, running on all supported platforms, are affected:
IBM InfoSphere Information Server: versions 9.1, 11.3, and 11.5
IBM InfoSphere Information Server on Cloud: version 11.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ve0xGs
X-Force Database: http://ift.tt/2uUJAOH

Archives

Archives

from IBM Product Security Incident Response Team http://ift.tt/2veMIY1