2023年11月18日星期六

IBM WebSphere Products Multiple Vulnerabilities

Release Date: 17 Nov 2023

RISK: Extremely High Risk

TYPE: Servers - Internet App Servers

TYPE: Internet App Servers

Multiple vulnerabilities were identified in IBM WebSphere Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and sensitive information disclosure on the targeted system.

 

Note:

CVE-2023-44487 is a denial-of-service (DoS) vulnerability in HTTP/2 protocol. The vulnerability known as Rapid Reset, has been exploited in the wild.

Impact

  • Denial of Service
  • Information Disclosure

System / Technologies affected

  • IBM WebSphere Application Server Liberty 17.0.0.3 - 23.0.0.11
  • IBM WebSphere Application Server Liberty 18.0.0.2 - 23.0.0.11
  • IBM WebSphere Hybrid Edition 5.1

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於

沒有留言:

發佈留言

訂閱： 發佈留言 (Atom)

IBM WebSphere 產品多個漏洞

IBM WebSphere 產品多個漏洞 發佈日期 : 2026 年 11 月 06 日 於 IBM WebSphere 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、繞過保安限制及敏感資料洩露。 影響 阻斷服務 資...

  • (沒有標題)
    RedHat Linux Kernel Multiple Vulnerabilities Release Date: 4 Sep 2024 RIS...
  • (沒有標題)
    Juniper Junos OS Multiple Vulnerabilities Release Date: 12 Jul 2024 RISK:...