IBM InfoSphere Information Server Directory Traversal Vulnerability

A path traversal vulnerability has been identified in IBM InfoSphere Information Server version 11.7. This vulnerability could allow a remote attacker to traverse directories on the system by sending a specially crafted URL request that includes 'dot dot' sequences. This could enable the attacker to view arbitrary files on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the system.

Remediation

Users can upgrade to InfoSphere Information Server version 11.7.1.0 or 11.7.1.5. For the most secure option, enable the IBM DataStage Flow Designer server with non-root administration. If only system files need protection, apply the InfoSphere DataStage Flow Designer security patch.