CVE-2022-22373

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
ibmCNA
4.6 MEDIUM
ADJACENT_NETWORK
LOW
LOW
CVSS:3.0/AV:A/A:N/I:L/UI:N/C:L/AC:L/S:U/PR:L/RC:C/E:U/RL:O
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
VendorProductVersion
ibminfosphere_information_server
11.7
𝑥
= Vulnerable software versions
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/221323
https://www.ibm.com/support/pages/node/6600235
https://exchange.xforce.ibmcloud.com/vulnerabilities/221323
https://www.ibm.com/support/pages/node/6600235