CVE-2023-35895

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 20, 2023
Updated: Dec 28, 2023
CWE ID 78
CWE ID 74

Summary

CVE-2023-35895 is a remote code execution vulnerability affecting IBM Informix JDBC Driver versions 4.10 and 4.50. An attacker can exploit this issue by injecting malicious code through JNDI (Java Naming and Directory Interface) when an unchecked argument is passed to a specific API. IBM's X-Force has assigned ID 259116 to this vulnerability. This vulnerability poses a significant threat as it can be exploited remotely, allowing an attacker to execute arbitrary code and potentially gain unauthorized access to sensitive data. It is recommended that users upgrade to a patched version of the JDBC driver to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share