Rewterz Threat Advisory – CVE-2022-43859 – IBM Navigator for i Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-43859

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface. By performing a UNION based SQL injection an attacker could see file permissions through this interface. 

Impact

• Data Manipulation

Indicators Of Compromise

CVE

• CVE-2022-43859

Affected Vendors

IBM

Affected Products

• IBM i 7.3
• IBM i 7.4
• IBM i 7.5

Remediation

Refer to IBM Security Bulletin for patch, upgrade or suggested workaround information.

IBM Security Bulletin