Description (CNA)
Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Observability with Instana | affected 239-0 before 239-2; affected 241-0 before 241-2; affected 243-0 |
CWE
CWE-306
References
- https://www.ibm.com/support/pages/node/6959969
- https://exchange.xforce.ibmcloud.com/vulnerabilities/248737
- http://packetstormsecurity.com/files/171770/IBM-Instana-243-0-Missing-Authentication.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.