9.1
Critical
CVE-2023-27290 Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and…
Description
Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Observability with Instana | 243-0 | No fix stated |
| Observability with Instana 241 | 241-0 → < 241-2 | 241-2 |
| Observability with Instana 239 | 239-0 → < 239-2 | 239-2 |