cve/2023/CVE-2023-27290.md

CVE-2023-27290

Description

Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.

POC

Reference

• http://packetstormsecurity.com/files/171770/IBM-Instana-243-0-Missing-Authentication.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/karimhabush/cyberowl
• https://github.com/zipponnova/IBM-Instana-Exploits
• https://github.com/zipponnova/Microservices-Exploitation