Lucene search

K
ibmIBM3555A3FFADF02BAA877A9B97019B86A241EFABD9FB36F78B750443D362E17AD5
HistoryApr 05, 2024 - 9:33 a.m.

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) could provide weaker than expected security (CVE-2023-50313)

2024-04-0509:33:32
www.ibm.com
12
ibm websphere
jazz for service management
weaker security
cve-2023-50313
tls connections
software vulnerability
interim fix

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Summary

IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) could provide weaker than expected security for outbound TLS connections.Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
Jazz for Service Management 1.1.3

Remediation/Fixes

Principal Product and Version(s) Affected Supporting Product and Version Affected Supporting Product Security Bulletin
Jazz for Service Management version 1.1.3 - 1.1.3.21

Websphere Application Server Full Profile 8.5.5

| Security Bulletin: IBM WebSphere Application Server could provide weaker than expected security (CVE-2023-50313)
Jazz for Service Management version 1.1.3.7 - 1.1.3.21|

Websphere Application Server Full Profile 9.0

| Security Bulletin: IBM WebSphere Application Server could provide weaker than expected security (CVE-2023-50313)

Workarounds and Mitigations

Please refer to WAS interim fix.

Affected configurations

Vulners
Node
ibmjazz_for_service_managementMatch1.1.3
CPENameOperatorVersion
jazz for service managementeq1.1.3

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for 3555A3FFADF02BAA877A9B97019B86A241EFABD9FB36F78B750443D362E17AD5