i Archives - CVE Vulnerability

CVE-2019-4728

Sun, 26 Feb 2023 06:33:28 +0000

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452.

The post CVE-2019-4728 appeared first on CVE Vulnerability.

CVE-2019-4738

Sun, 26 Feb 2023 06:33:28 +0000

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.

The post CVE-2019-4738 appeared first on CVE Vulnerability.

CVE-2019-4381

Sun, 26 Feb 2023 06:33:23 +0000

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

The post CVE-2019-4381 appeared first on CVE Vulnerability.

CVE-2022-43917

godfreyd94 — Thu, 23 Feb 2023 05:21:13 +0000

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.

The post CVE-2022-43917 appeared first on CVE Vulnerability.

CVE-2022-34165

godfreyd94 — Thu, 23 Feb 2023 05:19:21 +0000

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an attacker to conduct various attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429.

The post CVE-2022-34165 appeared first on CVE Vulnerability.

CVE-2022-22481

Thu, 23 Feb 2023 05:02:49 +0000

IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.

The post CVE-2022-22481 appeared first on CVE Vulnerability.

CVE-2023-23477

godfreyd94 — Wed, 22 Feb 2023 14:02:25 +0000

IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513.

The post CVE-2023-23477 appeared first on CVE Vulnerability.