CVE-2023-49886

概要

参考情報

• ibm.com/support/pages/node/7247179 · Vendor Advisory

transformation extender advanced のその他の脆弱性

• CVE-2023-50300中 6.2IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls.
• CVE-2023-49883高 7.5IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier…
• CVE-2023-49881高 8.8IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonat…
• CVE-2023-50301中 4.4IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user.
• CVE-2021-29883中 4.3IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on authorization token…