{"id":"CVE-2022-22373","state":"PUBLISHED","title":"An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file syste","description":"An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323.","publishedAt":"2022-07-01T18:01:10.061Z","updatedAt":"2024-09-16T22:56:52.615Z","severity":{"score":4.6,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:A/A:N/I:L/UI:N/C:L/AC:L/S:U/PR:L/RC:C/E:U/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM InfoSphere Information Server"],"affected":[{"vendor":"IBM","product":"InfoSphere Information Server","versions":[{"version":"11.7","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6600235","https://exchange.xforce.ibmcloud.com/vulnerabilities/221323"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:38.433Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/22xxx/CVE-2022-22373.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-22373","state":"PUBLISHED","datePublished":"2022-07-01T18:01:10.061Z","dateUpdated":"2024-09-16T22:56:52.615Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2022-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323."}],"affected":[{"vendor":"IBM","product":"InfoSphere Information Server","versions":[{"version":"11.7","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6600235","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/221323","name":"ibm-infosphere-cve202222373-info-disc (221323)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"LOW","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:A/A:N/I:L/UI:N/C:L/AC:L/S:U/PR:L/RC:C/E:U/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2022-07-01T18:01:09.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2022-06-30T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2022-06-30T00:00:00","ID":"CVE-2022-22373","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"InfoSphere Information Server","version":{"version_data":[{"version_value":"11.7"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"A","C":"L","I":"L","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6600235","refsource":"CONFIRM","title":"IBM Security Bulletin 6600235 (InfoSphere Information Server)","url":"https://www.ibm.com/support/pages/node/6600235"},{"name":"ibm-infosphere-cve202222373-info-disc (221323)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/221323"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6600235","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/221323","name":"ibm-infosphere-cve202222373-info-disc (221323)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T03:14:55.060Z"}}]}}}