Description
IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the WebSphere Application Server. IBM X-Force ID: 145970.
CVSS breakdown
CVSS 3.0
Availability
High
Attack Complexity
High
Attack Vector
Network
Confidentiality
High
Integrity
High
Privileges Required
Low
Scope
Changed
User Interaction
None
E
Unchanged
RC
Changed
RL
O
Affected products
- ibm / infosphere_information_server11.7 – 11.7