PT-2023-9007
CVE-2023-32336
·
تاريخ النشر
2023-05-19
·
تاريخ التحديث
2023-05-26
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere Information Server version 11.7
Description
The issue is related to the restoration of untrusted data in memory in the RMI service of the InfoSphere Information Server platform, which can lead to remote code execution. This allows a remote attacker to execute arbitrary code due to insecure deserialization in the RMI service.
Recommendations
For IBM InfoSphere Information Server version 11.7, consider disabling the RMI service as a temporary workaround until a patch is available. Restrict access to the RMI service to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾