There is a vulnerability CVE-2022-0778 which affects IBM Engineering Workflow Management (EWM).
CVEID:CVE-2022-0778
**DESCRIPTION:**OpenSSL is vulnerable to a denial of service, caused by a flaw in the BN_mod_sqrt() function when parsing certificates. By using a specially-crafted certificate with invalid explicit curve parameters, a remote attacker could exploit this vulnerability to cause an infinite loop, and results in a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/221911 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected Product(s) | Version(s) |
---|---|
EWM | 7.0.2 |
EWM | 7.0.1 |
Upgrade to version 7.0.2 iFix023 or later
IBM Engineering Lifecycle Management 7.0.2 iFix023
IBM Engineering Workflow Management 7.0.2 iFix023
Upgrade to version 7.0.1 iFix022 or later
IBM Engineering Lifecycle Management 7.0.1 iFix022
IBM Engineering Workflow Management 7.0.1 iFix022
None
CPE | Name | Operator | Version |
---|---|---|---|
ibm engineering workflow management | eq | 7.0.1 | |
ibm engineering workflow management | eq | 7.0.2 |