IBM InfoSphere Information Server SQL Injection Vulnerability

A SQL injection vulnerability has been identified in IBM InfoSphere Information Server version 11.7. This vulnerability allows remote attackers to send specially crafted SQL statements that could be used to view, add, modify, or delete information in the back-end database.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the database, allowing attackers to manipulate data by viewing, adding, modifying, or deleting information.

Remediation

Users can upgrade to InfoSphere Information Server version 11.7.1.0 or 11.7.1.6. For InfoSphere DataStage, a security patch will be published subsequently.