Lucene search

IbmVULNRICHMENT:CVE-2023-37404

HistoryOct 04, 2023 - 1:17 a.m.

CVE-2023-37404 IBM Observability with Instana code execution

2023-10-0401:17:44

ibm

github.com

ibm

observability

instana

code execution

dns poisoning

x-force

CVSS3

6.4

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.

References

exchange.xforce.ibmcloud.com/vulnerabilities/259789

www.ibm.com/support/pages/node/7041863

CVSS3

6.4

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2023-37404