Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM01A0100D93C2D77DB5E08F6099991BC102A97E00150E703B51AA54B6BAC1450E
HistoryJul 08, 2024 - 5:47 p.m.

Security Bulletin: TSSC/IMC is vulnerable to aritrary code excecution due to Java (CVE-2023-22081)

2024-07-0817:47:00
www.ibm.com
11
tssc/imc
arbitrary code execution
java library update
cve-2023-22081
vulnerability
patch
upgrade

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.7

Confidence

High

JSON

Summary

TSSC/IMC is vulnerable to aritrary code excecution due to Dmidecode. A patch has been provided that updates the Java library. (CVE-2023-22081)

Vulnerability Details

CVEID:CVE-2023-22081
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JSSE component could allow a remote attacker to cause no confidentiality impact, no integrity impact, and low availability impact.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/268929 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
Total Storage Service Console (TSSC) / TS4500 IMC 9.4.14
Total Storage Service Console (TSSC) / TS4500 IMC 9.4.21
Total Storage Service Console (TSSC) / TS4500 IMC 9.4.26
Total Storage Service Console (TSSC) / TS4500 IMC 9.5.8

Remediation/Fixes

Affected Product(s) Version(s) Remediation/Fix/Instructions
Total Storage Service Console (TSSC) / TS4500 IMC 9.4.14

Upgrade to 9.4.26/9.5.8

Download patch and execute on TSSC/IMC system

Total Storage Service Console (TSSC) / TS4500 IMC| 9.4.21|

Upgrade to 9.4.26/9.5.8

Download patch and execute on TSSC/IMC system

Total Storage Service Console (TSSC) / TS4500 IMC| 9.4.26| Download patch and execute on TSSC/IMC system
Total Storage Service Console (TSSC) / TS4500 IMC| 9.5.8| Download patch and execute on TSSC/IMC system

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmts7700Match9.4.14
OR
ibmts7700Match9.4.21
OR
ibmts7700Match9.4.26
OR
ibmts7700Match9.5.8
VendorProductVersionCPE
ibmts77009.4.14cpe:2.3:h:ibm:ts7700:9.4.14:*:*:*:*:*:*:*
ibmts77009.4.21cpe:2.3:h:ibm:ts7700:9.4.21:*:*:*:*:*:*:*
ibmts77009.4.26cpe:2.3:h:ibm:ts7700:9.4.26:*:*:*:*:*:*:*
ibmts77009.5.8cpe:2.3:h:ibm:ts7700:9.5.8:*:*:*:*:*:*:*

Related

veracode 1
oraclelinux 10
alpinelinux 1
osv 18
nessus 64
openvas 13
rocky 1
redhat 25
prion 1
redhatcve 1
almalinux 7
ibm 38
ubuntucve 1
nvd 1
debian 3
amazon 4
cve 1
centos 2
debiancve 1
cvelist 1
f5 1
redos 1
ubuntu 1
kaspersky 1
mageia 1
veracode
veracode
Denial Of Service (DoS)
2023-11-30 20:33:47
oraclelinux
oraclelinux
java-11-openjdk security and bug fix update
2023-10-26 00:00:00
java-11-openjdk security and bug fix update
2023-10-19 00:00:00
java-11-openjdk security and bug fix update
2023-10-27 00:00:00
alpinelinux
alpinelinux
CVE-2023-22081
2023-10-17 22:15:13
osv
osv
openjdk-11 - security update
2023-10-29 00:00:00
java-11-openjdk-11.0.21.0-1.1 on GA media
2024-06-15 00:00:00
openjdk-11 - security update
2023-10-27 00:00:00
nessus
nessus
Oracle Linux 7 : java-11-openjdk (ELSA-2023-5736)
2023-10-19 00:00:00
Oracle Linux 9 : java-11-openjdk (ELSA-2023-5744)
2023-10-27 00:00:00
RHEL 9 : java-11-openjdk (RHSA-2023:5743)
2023-10-18 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4152-1)
2023-10-23 00:00:00
Debian: Security Advisory (DLA-3636-1)
2023-10-30 00:00:00
CentOS: Security Advisory for java-11-openjdk (CESA-2023:5736)
2024-03-05 00:00:00
rocky
rocky
java-11-openjdk security and bug fix update
2023-10-24 18:36:24
redhat
redhat
(RHSA-2023:5742) Moderate: java-11-openjdk security and bug fix update
2023-10-18 14:37:59
(RHSA-2023:5735) Moderate: OpenJDK 11.0.21 Security Update for Windows Builds
2023-10-18 15:41:21
(RHSA-2023:5740) Moderate: java-11-openjdk security and bug fix update
2023-10-18 15:06:40
prion
prion
Buffer overflow
2023-10-17 22:15:00
redhatcve
redhatcve
CVE-2023-22081
2023-10-18 14:00:48
almalinux
almalinux
Moderate: java-11-openjdk security and bug fix update
2023-10-18 00:00:00
Moderate: java-11-openjdk security and bug fix update
2023-10-18 00:00:00
Moderate: java-17-openjdk security and bug fix update
2023-10-18 00:00:00
ibm
ibm
Security Bulletin: IBM Event Streams is affected by a partial denial of service in Java (CVE-2023-22081).
2024-02-16 08:19:31
Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable multiple issues due to IBM Runtime Environment Java Technology Edition
2024-01-16 17:43:03
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility
2024-02-02 22:27:34
ubuntucve
ubuntucve
CVE-2023-22081
2023-10-17 00:00:00
nvd
nvd
CVE-2023-22081
2023-10-17 22:15:13
debian
debian
[SECURITY] [DLA 3636-1] openjdk-11 security update
2023-10-29 08:16:42
[SECURITY] [DSA 5548-1] openjdk-17 security update
2023-11-05 19:56:26
[SECURITY] [DSA 5537-1] openjdk-11 security update
2023-10-27 16:12:53
amazon
amazon
Medium: java-11-amazon-corretto
2023-10-18 02:27:00
Medium: java-17-amazon-corretto
2023-10-18 02:27:00
Medium: java-1.8.0-openjdk
2024-01-03 22:37:00
cve
cve
CVE-2023-22081
2023-10-17 22:15:13
centos
centos
java security update
2024-01-12 19:19:02
java security update
2024-01-12 19:19:48
debiancve
debiancve
CVE-2023-22081
2023-10-17 22:15:13
cvelist
cvelist
CVE-2023-22081
2023-10-17 21:02:56
f5
f5
K000138103 : Oracle Java SE vulnerabilities CVE-2023-22067 and CVE-2023-22081
2024-01-02 00:00:00
redos
redos
ROS-20240801-02
2024-08-01 00:00:00
ubuntu
ubuntu
OpenJDK vulnerabilities
2023-11-29 00:00:00
kaspersky
kaspersky
KLA61443 Multiple vulnerabilities in Oracle Java SE and GraalVM
2023-10-17 00:00:00
mageia
mageia
Updated java openjdk packages fix security vulnerabilities
2023-11-28 03:11:29

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.7

Confidence

High

JSON
Related for 01A0100D93C2D77DB5E08F6099991BC102A97E00150E703B51AA54B6BAC1450E
veracode1oraclelinux10alpinelinux1osv18nessus64openvas13rocky1redhat25prion1redhatcve1almalinux7ibm38ubuntucve1nvd1debian3amazon4cve1centos2debiancve1cvelist1f51redos1ubuntu1kaspersky1mageia1