{"id":"CVE-2023-50955","aliases":["EUVD-2023-55684","GHSA-g6x9-362c-53pf"],"status":"published","title":"IBM InfoSphere Information Server information disclosure","description":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.","severity":{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00595,"percentile":0.48958,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22","CWE-36"],"published":"2024-02-21T14:32:06Z","modified":"2026-06-17T06:40:18Z","products":[{"vendor":"ibm","product":"infosphere information server"},{"vendor":"ibm","product":"infosphere_information_server"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7116610","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/275777","tags":["x_transferred","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50955"},{"url":"https://github.com/advisories/GHSA-g6x9-362c-53pf"}],"sources":{"cve":[{"id":"CVE-2023-50955","title":"IBM InfoSphere Information Server information disclosure","description":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.","status":"published","published":"2024-02-21T14:32:06.614Z","modified":"2024-08-02T22:23:43.87Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-36"],"updated_at":"2026-11-02T14:35:34.55015Z"}],"euvd":[{"id":"EUVD-2023-55684","description":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.","status":"published","published":"2024-02-21T14:32:06Z","modified":"2024-08-02T22:23:43Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T03:26:07.661682Z"}],"ghsa":[{"id":"GHSA-g6x9-362c-53pf","title":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the...","description":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.","status":"published","published":"2024-02-21T15:30:45Z","modified":"2026-03-24T05:05:37Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-22","CWE-36"],"updated_at":"2026-11-02T15:06:48.910736Z"}],"nvd":[{"id":"CVE-2023-50955","description":"IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system.  IBM X-Force ID:  275777.","status":"published","published":"2024-02-21T15:15:08.76Z","modified":"2026-06-17T06:40:18.677Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-36","CWE-22"],"updated_at":"2026-11-02T14:09:07.077422Z"}]}}