Lucene search

IBM7B4E5C063D6F9CD8645D9C600330176BF74A9C64C807687472AAF7B0C8ECBE9A

HistoryApr 23, 2024 - 6:47 a.m.

Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is vulnerable to a denial of service

2024-04-2306:47:11

www.ibm.com

security bulletin

ibm tivoli system automation application manager

cve-2023-51775

upgrade

jose4j

workarounds

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

9.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Summary

A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2023-51775)

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Tivoli System Automation Application Manager	4.1

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now by upgrading WebSphere Application Server.

Principal Product and Version(s)	Affected Supporting Product and Version	Affected Supporting Product Security Bulletin
IBM Tivoli System Automation Application Manager 4.1	WebSphere Application Server 8.5

Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to a denial of service due to jose4j (CVE-2023-51775)

IBM Tivoli System Automation Application Manager 4.1| WebSphere Application Server 9.0|

Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to a denial of service due to jose4j (CVE-2023-51775)

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_system_automation_application_managerMatch4.1

VendorProductVersionCPE
ibmtivoli_system_automation_application_manager4.1cpe:2.3:a:ibm:tivoli_system_automation_application_manager:4.1:*:*:*:*:*:*:*