CVE-2023-50301

Description

References

• ibm.com/support/pages/node/7246882 · Vendor Advisory

More vulnerabilities in transformation extender advanced

• CVE-2023-49886CRITICAL 9.8IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java de…
• CVE-2023-50300MEDIUM 6.2IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls.
• CVE-2023-49883HIGH 7.5IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier…
• CVE-2023-49881HIGH 8.8IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonat…
• CVE-2021-29883MEDIUM 4.3IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on authorization token…