CVE-2023-37404

Опубликовано: 04 окт. 2023

Источник: nvd

CVSS3: 6.4

CVSS3: 9.8

EPSS Низкий

Описание

IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/259789
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7041863
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/259789
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7041863
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:observability_with_instana:*:*:*:*:*:*:*:*

Версия от 1.0.243 (включая) до 1.0.255 (исключая)

EPSS

Процентиль: 27%

0.00095

Низкий

6.4 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-pp6q-xg72-mhv6

CVSS3: 6.4

github

больше 2 лет назад

IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.

EPSS

Процентиль: 27%

0.00095

Низкий

6.4 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo