Lucene search

IBM19BA09FCB9E5F45D7ABCD62A40B6F737067124D91D060048CCF5304331714E84

HistoryJul 01, 2024 - 6:00 a.m.

Security Bulletin: Denial of service caused by jose4j in IBM WebSphere Application Server Liberty may affect IBM Storage Protect Operations Center

2024-07-0106:00:14

www.ibm.com

ibm storage protect operations center

denial of service

jose4j

vulnerability

ibm websphere application server liberty

cve-2023-51775

input validation

remote attacker

cvss base score 7.5

aix

linux

windows

fix

ibm support pages

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Summary

IBM Storage Protect Operations Center may be affected by denial of service caused by jose4j in IBM WebSphere Application Server Liberty. CVE-2023-51775.

Vulnerability Details

CVEID:CVE-2023-51775
**DESCRIPTION:**jose4j is vulnerable to a denial of service, caused by improper input validation. By sending a specially crafted p2c value, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/275907 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Storage Protect Operations Center	8.1.0.000 - 8.1.22.xxx

Remediation/Fixes

Affected Versions	Fixing Level	Platform	Link to Fix and Instructions
8.1.0.000 - 8.1.22.xxx	8.1.23	AIX, Linux, Windows	<https://www.ibm.com/support/pages/node/588021>

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmstorage_protectMatch8.1

CPENameOperatorVersion
ibm storage protecteq8.1

CPE	Name	Operator	Version
	ibm storage protect	eq	8.1