IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component.
Attack Parameters
Attack Vector
Network
Атака возможна удалённо
Attack Complexity
Low
Легко эксплуатировать
Privileges Required
Low
Нужны базовые права
User Interaction
None
Не нужно действие пользователя
Impact Assessment
Confidentiality
High
Полная утечка данных
Integrity
High
Полная модификация данных
Availability
High
Полный отказ в обслуживании
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 1
ibm:datastage_on_cloud_pak_for_data
Known Affected Software Configurations 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Ibm Datastage_On_Cloud_Pak_For_Data
cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:*:*:*:*:*:*:*:*
|
5.1.2
|
5.3.1
|