Lucene search

K
ibmIBM7A3376B4A6E8EE4292B0194E57D8FA93E75BF0C432FFB6A9A5316CA406C64A88
HistoryFeb 14, 2024 - 12:00 p.m.

Security Bulletin: CVE-2023-22049 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

2024-02-1412:00:05
www.ibm.com
9
cve-2023-22049
ibm sdk
java technology edition
content collector
email
file systems
microsoft sharepoint

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

Summary

CVE-2023-22049 was disclosed in the Oracle July 2023 Quarterly CPU Update.

Vulnerability Details

CVEID:CVE-2023-22049
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Libraries component could allow a remote attacker to cause low integrity impacts.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261048 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
Content Collector for File Systems 4.0.1
Content Collector for Email 4.0.1
Content Collector for Microsoft SharePoint 4.0.1

Remediation/Fixes

Product

| VRM|Remediation
—|—|—
Content Collector for Email| 4.0.1| Use Content Collector for Email 4.0.1.15 Interim Fix IF009
Content Collector for File Systems| 4.0.1| Use Content Collector for File Systems 4.0.1.15 Interim Fix IF009
Content Collector for Microsoft SharePoint| 4.0.1| Use Content Collector for Microsoft SharePoint 4.0.1.15 Interim Fix IF009

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmcontent_collectorMatch4.0.0
OR
ibmcontent_collectorMatch4.0.1

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%