IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Confirm exposure before applying a vendor-supported change.
The impacted product is end-of-life and should be disconnected if still in use.
Due date: 2022.06.15Confirm that IBM InfoSphere BigInsights and an affected version are present.
Combine exploitation signals with asset exposure and business criticality.
Follow the vendor advisory or supported update path and preserve rollback options.
Recheck the version, service health, access paths, and relevant logs.
