Lucene search

IBM34ED098A84343B3AE92799346B166C374A59035656749C6200C21B9ADF4FB939

HistoryJun 22, 2023 - 6:19 p.m.

Security Bulletin: IBM Storage Protect Operations Center is vulnerable to denial of service due to Java SE (CVE-2023-21830, CVE-2023-21843)

2023-06-2218:19:12

www.ibm.com

ibm storage protect

vulnerability

java se

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

47.2%

JSON

Summary

Java SE is used by IBM Storage Protect Operations Center and may be affected by this vulnerability.

Vulnerability Details

CVEID:CVE-2023-21830
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Serialization component could allow a remote attacker to cause a denial of service resulting in a low integrity impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/245038 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

CVEID:CVE-2023-21843
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Sound component could allow a remote attacker to cause a denial of service resulting in a low integrity impact using unknown attack vectors.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/245037 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Storage Protect Operations Center	8.1

Remediation/Fixes

IBM Storage Protect Operations Center Affected Versions	Fixing Level	Platform	Link to Fix and Instructions
8.1.0.000 - 8.1.18.xxx	8.1.19	AIX, Linux, Windows	<https://www.ibm.com/support/pages/node/6988821>

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmstorage_protectMatch8.1

VendorProductVersionCPE
ibmstorage_protect8.1cpe:2.3:a:ibm:storage_protect:8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	storage_protect	8.1	cpe:2.3:a:ibm:storage_protect:8.1:::::::*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

47.2%

JSON

Related for 34ED098A84343B3AE92799346B166C374A59035656749C6200C21B9ADF4FB939