CVE Catalog
CVE-2023-35898
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.46%
36th percentile - higher than 36% of all known CVEs
Summary
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer.
Risk Assessment
The organization may be exposed to sensitive data leaks, potentially leading to privacy breaches and loss of customer trust.
Recommendation
It is recommended to review and improve the security configuration in InfoSphere Data Flow Designer to minimize the risk of information leakage.
Original NVD description (English source)
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.