4.3
Moyenne
CVE-2022-43857 IBM Navigator for i 7.3, 7.4 and 7.5 could allow an authenticated user to access IBM Navigator for i log files they…
Description
IBM Navigator for i 7.3, 7.4 and 7.5 could allow an authenticated user to access IBM Navigator for i log files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks and download log files by modifying servlet filter. IBM X-Force ID: 239301.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Navigator for i | Versions non publiées |
Autres CVE de Navigator for i
Les 4 CVE de Navigator for i →
CVE-2022-43860
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information they are…
4.3
Moyenne
CVE-2022-43859
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object…
6.3
Moyenne
CVE-2022-43858
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files…
4.3
Moyenne