VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Mar 3, 2023· Updated Jun 17, 2026

CVE-2023-27290

CVE-2023-27290

Description

Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Instanallm-create
    Range: 239-0 through 239-2, 241-0 through 241-2, 243-0
  • IBM/Observability With Instana3 versions
    cpe:2.3:a:ibm:observability_with_instana:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:observability_with_instana:*:*:*:*:*:*:*:*range: >=239-0,<=239-2
    • cpe:2.3:a:ibm:observability_with_instana:243-0:*:*:*:*:*:*:*
    • (no CPE)range: 239-0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.