CVE-2023-35895

Summary

CVE-2023-35895 is a remote code execution vulnerability affecting IBM Informix JDBC Driver versions 4.10 and 4.50. An attacker can exploit this issue by injecting malicious code through JNDI (Java Naming and Directory Interface) when an unchecked argument is passed to a specific API. IBM's X-Force has assigned ID 259116 to this vulnerability. This vulnerability poses a significant threat as it can be exploited remotely, allowing an attacker to execute arbitrary code and potentially gain unauthorized access to sensitive data. It is recommended that users upgrade to a patched version of the JDBC driver to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.