DataStage on Cloud Pak for Data vulnerabilities
47 known vulnerabilities in DataStage on Cloud Pak for Data from IBM. 47 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
DataStage on Cloud Pak for Data: Improper Authorization
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to improper authorization.
- 9.1 Critical severity
DataStage on Cloud Pak for Data: Improper Limitation of a Pathname to a Restricted Directory
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction.
- 8.8 High severity
DataStage on Cloud Pak for Data: Improper Neutralization of Special Elements used in an OS Command
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component.
- 8.8 High severity
DataStage on Cloud Pak for Data: Improper Neutralization of Special Elements used in an OS Command
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component.
- 8.8 High severity
DataStage on Cloud Pak for Data: Improper Neutralization of Special Elements used in an OS Command
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component.
- 7.5 High severity
DataStage on Cloud Pak for Data: Exposure of Sensitive System Information to an Unauthorized Control Sphere
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system.
- 8.8 High severity
DataStage on Cloud Pak: Unrestricted Upload of File with Dangerous Type
IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads.