Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM910506639537EEE44F3EFEF75DE6DA16EBB508E16099077C8D25DD759C7DC1FF
HistoryJun 27, 2023 - 7:01 p.m.

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management (CVE-2023-30441)

2023-06-2719:01:25
www.ibm.com
15
ibm
websphere application server
ibm master data management
cve-2023-30441
ibmjceplus
jsse
infosphere
vulnerability
upgrade
security bulletin

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

57.2%

JSON

Summary

IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE components could expose sensitive information using a combination of flaws and configurations within WebSphere Application Server used by Master Data Management.

Vulnerability Details

CVEID:CVE-2023-30441
**DESCRIPTION:**IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/253188 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
InfoSphere Master Data Management 12.0
InfoSphere Master Data Management 11.6

Remediation/Fixes

Upgrade IBM SDK, Java Technology Edition to Version 8 SR7 FP15 or later within your WebSphere Application Server. See the supporting security bulletin below from WebSphere Application Server for instructions on achieving this.

Principal Product and Version(s) Affected Supporting Product and Version Affected Supporting Product Security Bulletin
InfoSphere Master Data Management v11.6, v12.0 IBM WebSphere Application Server Security Bulletin:Vulnerability in IBM® Java SDK affects IBM WebSphere Application Server and IBM WebSphere Application Server Liberty due to CVE-2023-30441

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibminfosphere_master_data_managementMatch11.6
OR
ibminfosphere_master_data_managementMatch12.0

Related

ibm 49
redhatcve 1
cvelist 1
nvd 1
cve 1
prion 1
nessus 6
redhat 2
aix 1
openvas 1
ibm
ibm
Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server traditional and Liberty profile shipped with IBM Business Automation Workflow (CVE-2023-30441)
2023-05-12 17:25:50
Security Bulletin: A vulnerability in IBM Java affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
2024-04-30 16:44:08
Security Bulletin: A vulnerability in IBM Java SDK affects IBM Tivoli Monitoring for Virtual Environments Agent for Linux Kernel-based Virtual Machines (CVE-2023-30441)
2023-05-22 11:34:15
redhatcve
redhatcve
CVE-2023-30441
2023-04-20 21:01:11
cvelist
cvelist
CVE-2023-30441 IBM Java information disclosure
2023-04-29 14:40:40
nvd
nvd
CVE-2023-30441
2023-04-29 15:15:18
cve
cve
CVE-2023-30441
2023-04-29 15:15:18
prion
prion
Information disclosure
2023-04-29 15:15:00
nessus
nessus
IBM Java 8.0 < 8.0.7.15
2023-04-20 00:00:00
IBM Java 8.0.7 < 8.0.7.15 Information Exposure (6985011)
2023-05-17 00:00:00
RHEL 7 : java-1.8.0-ibm (RHSA-2022:6756)
2022-09-29 00:00:00
redhat
redhat
(RHSA-2022:6735) Moderate: java-1.8.0-ibm security update
2022-10-25 07:58:21
(RHSA-2022:6756) Moderate: java-1.8.0-ibm security update
2022-09-29 15:05:13
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2023-05-19 10:29:25
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2491-1)
2023-06-13 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

57.2%

JSON
Related for 910506639537EEE44F3EFEF75DE6DA16EBB508E16099077C8D25DD759C7DC1FF
ibm49redhatcve1cvelist1nvd1cve1prion1nessus6redhat2aix1openvas1