Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-27290

IBM Observability with Instana missing authentication

Description

Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Observability with Instana

Default version status: unaffected

  • 239-0 to < 239-2affected
  • 241-0 to < 241-2affected
  • 243-0affected

References