{"id":"CVE-2023-50955","state":"PUBLISHED","title":"IBM InfoSphere Information Server information disclosure","description":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.","publishedAt":"2024-02-21T14:32:06.614Z","updatedAt":"2024-08-02T22:23:43.870Z","severity":{"score":2.4,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM InfoSphere Information Server"],"affected":[{"vendor":"IBM","product":"InfoSphere Information Server","defaultStatus":"unaffected","versions":[{"version":"11.7","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/7116610","https://exchange.xforce.ibmcloud.com/vulnerabilities/275777"],"weaknesses":["CWE-36"],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/50xxx/CVE-2023-50955.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-50955","state":"PUBLISHED","datePublished":"2024-02-21T14:32:06.614Z","dateUpdated":"2024-08-02T22:23:43.870Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-12-16T19:35:51.572Z"},"containers":{"cna":{"title":"IBM InfoSphere Information Server information disclosure","descriptions":[{"lang":"en","value":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777."}],"affected":[{"vendor":"IBM","product":"InfoSphere Information Server","defaultStatus":"unaffected","versions":[{"version":"11.7","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7116610","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/275777"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":2.4,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-36","description":"CWE-36 Absolute Path Traversal","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2024-02-21T14:32:06.614Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-12T21:10:33.046535Z","id":"CVE-2023-50955","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-12T21:10:39.456Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/7116610","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/275777","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T22:23:43.870Z"}}]}}}