Lucene search
IBMFA7577337B12FD59AF7D455741A74001A4AC5E50BAAB46EE5032B560FE6FFA9FHistoryNov 23, 2022 - 2:12 a.m.
Security Bulletin: A vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2022-40674)
2022-11-2302:12:54
www.ibm.com
18
0.006 Low
EPSS
Percentile
77.6%
Summary
IBM HTTP Server (IHS) is used by the IBM Rational ClearQuest server and web components. Information about security vulnerabilities affecting IHS have been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Rational ClearQuest | 8.0.0 |
| IBM Rational ClearQuest | 8.0.1 |
| IBM Rational ClearQuest | 9.0 |
| IBM Rational ClearQuest | 9.0.1 |
| IBM Rational ClearQuest | 9.0.2 |
| IBM Rational ClearQuest | 9.1 |
Remediation/Fixes
| Refer to the following security bulletin(s) for vulnerability details and information about fixes addressed by IBM HTTP Server (IHS), which is used by IBM Rational ClearQuest. Principal Product and Version(s) | **Affected Supporting Product and Version(s) ** | **Affected Supporting Product Security Bulletin(s) ** |
|---|---|---|
| IBM Rational ClearQuest, versions 8.0.0.x, 8.0.1.x, 9.0.0.x, 9.0.1.x, 9.0.2.x, 9.1.0.x | IBM HTTP Server versions 7.0, 8.0, 8.5 and 9.0. |
ClearQuest Versions
|
Applying the fix
—|—
8.0.0.x, 8.0.1.x, 9.0.0.x, 9.0.1.x, 9.0.2.x, 9.1.0.x | Apply the appropriate IBM HTTP Server fix (see bulletin link above) directly to your CM server host. No ClearQuest-specific steps are necessary.
For 8.0.x, 8.0.1.x and earlier releases, IBM recommends upgrading to a fixed, supported version/release/platform of the product.
Workarounds and Mitigations
None
Related
nessus
nessus
EulerOS Virtualization 2.9.1 : expat (EulerOS-SA-2023-1190)
2023-01-11 00:00:00
Fedora 35 : expat (2022-c68d90efc3)
2022-12-23 00:00:00
RHEL 8 : firefox (RHSA-2022:7025)
2022-10-18 00:00:00
oraclelinux
oraclelinux
expat security update
2022-10-29 00:00:00
thunderbird security update
2022-10-20 00:00:00
firefox security update
2022-10-19 00:00:00
ibm
ibm
f5
f5
K44454157 : Expat vulnerability CVE-2022-40674
2022-10-31 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0249
2022-09-21 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0249
2022-09-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-0520
2022-09-21 00:00:00
cve
cve
CVE-2022-40674
2022-09-14 11:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2022-2762)
2022-11-14 00:00:00
Mageia: Security Advisory (MGASA-2022-0399)
2022-10-28 00:00:00
Fedora: Security Advisory for expat (FEDORA-2022-15ec504440)
2022-10-08 00:00:00
almalinux
almalinux
Important: expat security update
2022-10-06 00:00:00
Important: firefox security update
2022-10-18 00:00:00
Important: thunderbird security update
2022-10-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-40674 affecting package expat for versions less than 2.4.8-2
2022-09-23 18:23:13
CVE-2022-40674 affecting package expat 2.4.6-1
2022-10-04 07:51:28
mageia
mageia
Updated expat packages fix security vulnerability
2022-10-01 20:48:24
Updated thunderbird packages fix security vulnerability
2022-10-28 09:54:08
Updated firefox packages fix security vulnerability
2022-10-28 09:54:08
osv
osv
Important: thunderbird security update
2022-10-18 17:40:48
Important: expat security update
2022-10-06 00:00:00
Important: expat security update
2022-10-11 00:00:00
redhatcve
redhatcve
CVE-2022-40674
2022-09-29 05:18:54
amazon
amazon
Important: expat
2022-10-31 19:40:00
Important: expat
2022-12-01 17:34:00
redhat
redhat
(RHSA-2022:7021) Important: thunderbird security update
2022-10-18 17:40:32
(RHSA-2022:6996) Important: thunderbird security update
2022-10-18 12:25:34
(RHSA-2022:6967) Important: compat-expat1 security update
2022-10-17 08:01:11
prion
prion
Design/Logic Flaw
2022-09-14 11:15:00
veracode
veracode
Use-After-Free
2022-09-15 08:37:15
cvelist
cvelist
CVE-2022-40674
2022-09-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2168
2023-06-20 09:22:31
Advisory ROSA-SA-2023-2166
2023-06-20 09:12:17
freebsd
freebsd
expat -- Heap use-after-free vulnerability
2022-09-14 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: expat-2.4.9-1.fc36
2022-10-07 15:56:55
[SECURITY] Fedora 35 Update: expat-2.4.9-1.fc35
2022-10-14 12:58:55
debian
debian
[SECURITY] [DSA 5236-1] expat security update
2022-09-22 20:17:33
rocky
rocky
expat security update
2022-10-06 14:37:41
firefox security update
2022-10-18 17:41:04
expat security update
2022-10-11 12:38:26
debiancve
debiancve
CVE-2022-40674
2022-09-14 11:15:00
cloudlinux
cloudlinux
Fixed CVE-2022-40674 in expat
2022-09-26 11:53:23
slackware
slackware
[slackware-security] expat
2022-09-20 22:58:31
[slackware-security] python3
2022-10-14 01:46:13
alpinelinux
alpinelinux
CVE-2022-40674
2022-09-14 11:15:00
cgr
cgr
CVE-2022-40674 vulnerabilities
2024-02-06 23:19:33
wolfi
wolfi
CVE-2022-40674 vulnerabilities
2024-02-07 01:47:52
centos
centos
expat security update
2022-10-26 14:19:51
githubexploit
githubexploit
Exploit for Use After Free in Libexpat Project Libexpat
2022-10-19 11:15:29
Exploit for Use After Free in Libexpat Project Libexpat
2022-10-19 11:15:29
ubuntucve
ubuntucve
CVE-2022-40674
2022-09-14 00:00:00
0.006 Low
EPSS
Percentile
77.6%
Related for FA7577337B12FD59AF7D455741A74001A4AC5E50BAAB46EE5032B560FE6FFA9F