CVE-2023-27290 IBM Observability with Instana missing authentication
Network attackers can access IBM Instana Docker datastores without authentication, allowing unauthorized read and write access to sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-27290?
CVE-2023-27290 is a critical missing authorization vulnerability in IBM Observability with Instana, published on 3 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.
Weakness: CWE-306
Which versions are affected by CVE-2023-27290?
It affects 1 product.
Products include Ibm Observability With Instana.
How do I fix CVE-2023-27290?
No fix has been published for CVE-2023-27290 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-27290 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-27290 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in IBM Observability with Instana
Sources
Also known as GHSA-g98m-73rh-c5j6.