CVE-2023-47161 IBM UrbanCode Deploy denial of service

2023-12-1923:52:20

CWE-20

ibm

www.cve.org

cve-2023-47161

ibm urbancode deploy

denial of service

input validation

resource exhaustion

ibm x-force

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

Percentile

13.0%

JSON

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion. IBM X-Force ID: 270799.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "UrbanCode Deploy",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "7.2.3.7",
        "status": "affected",
        "version": "7.2",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "7.3.2.2",
        "status": "affected",
        "version": "7.3",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "7.1.2.14",
        "status": "affected",
        "version": "7.1",
        "versionType": "semver"
      }
    ]
  }
]