CVE-2022-43857

IBM Navigator for i 7.3, 7.4 and 7.5 could allow an authenticated user to access IBM Navigator for i log files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks and download log files by modifying servlet filter. IBM X-Force ID: 239301.

Score
CVSS 3.1 4.3 Medium
Status
Modified - psirt@us.ibm.com
Published
2022-12-22
Last modified
2025-04-15
Weaknesses
CWE-22

Affected products

References

 
 
© AVABIS GmbH privacypolicy about