CVE-2021-29875 Information disclosure in InfoSphere Information Server

What is CVE-2021-29875?

CVE-2021-29875 is a medium-severity vulnerability in Ibm Infosphere Information Server, published on 2 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third party domain access vulnerability. IBM X-Force ID: 206572.

Which versions are affected by CVE-2021-29875?

It affects 1 product.

Products include Ibm Infosphere Information Server.

How do I fix CVE-2021-29875?

No fix has been published for CVE-2021-29875 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-29875 being exploited?

There is no known exploitation of CVE-2021-29875 in the wild and no public exploit code.

Other vulnerabilities in Ibm Infosphere Information Server

• CVE-2009-4240 Memory corruption in n/a Critical 10.0
• CVE-2022-40752 Command injection in InfoSphere DataStage Critical 9.8
• CVE-2022-22425 Code injection in IBM InfoSphere Information Server Critical 9.8
• CVE-2020-27583 Deserialization in n/a Critical 9.8
• CVE-2022-40747 XML external entity in IBM InfoSphere Information Server Critical 9.1

All Ibm Infosphere Information Server vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4v86-55fp-qc5m.