Critical Vulnerability in IBM Instana's Products

Published on 09 Mar 2023


IBM has released security updates addressing a critical vulnerability (CVE-2023-27290) in their Instana's products.

Successful exploitation of the vulnerability could allow an attacker with network access to the datastores to gain read or write privileges.

The following versions of Instana are affected:
  • IBM Observability with Instana version 239-0 to 239-2
  • IBM Observability with Instana version 241-0 to 241-2
  • IBM Observability with Instana version 243-0

Users and administrators of the affected product versions are advised to upgrade to the latest versions immediately.

More information is available here: