Lucene search

IBM4AF159E52D061DF90FD8462C87C55B7A354EEB5AFA47448EABE90D8643E4A6AC

HistoryJul 30, 2024 - 1:42 p.m.

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2024-27309)

2024-07-3013:42:29

www.ibm.com

ibm tivoli netcool

omnibus

transport module

common integration library

apache kafka

vulnerability

denial of service

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

High

JSON

Summary

Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. [CVE-2024-27309] The below vulnerability have been addressed.

Vulnerability Details

CVEID:CVE-2024-27309
**DESCRIPTION:**Apache Kafka is vulnerable to a denial of service, caused by improper access control during migration from ZK mode to KRaft mode. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/287552 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Tivoli Netcool/OMNIbus Integration - Transport Module Common Integration Library	common-transportmodule-18_0 up to and including common-transportmodule-39_0

Remediation/Fixes

Updated Product(s)	Version(s)	Remediation/Fix/Instructions
IBM Tivoli Netcool/OMNIbus Integration - Transport Module Common Integration Library	common-transportmodule-40_0	Refer to release notice for the part number of the new package and instructions for the upgrade

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_netcool_webtopMatch1.6

VendorProductVersionCPE
ibmtivoli_netcool_webtop1.6cpe:2.3:a:ibm:tivoli_netcool_webtop:1.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_netcool_webtop	1.6	cpe:2.3:a:ibm:tivoli_netcool_webtop:1.6:::::::*

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

High

JSON

Related for 4AF159E52D061DF90FD8462C87C55B7A354EEB5AFA47448EABE90D8643E4A6AC