Lucene search

IBMA48042D7AC2D28023729E90E65196CF21396C140327A6F7A5DFADB5E6D7314C2

HistoryDec 15, 2023 - 4:30 p.m.

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty may affect IBM Storage Protect Operations Center (CVE-2023-38737)

2023-12-1516:30:18

www.ibm.com

ibm websphere

application server liberty

ibm storage protect operations center

denial of service

vulnerability

ibm x-force id 262567

cvss base score 5.9

affected products

ibm storage protect server

fixing level 8.1.21

platform aix

linux

windows

ibm support pages

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

JSON

Summary

IBM Storage Protect Operations Center may be affected by vulnerabilities in IBM WebSphere Application Server Liberty such as denial of service caused by sending a specially-crafted request.

Vulnerability Details

CVEID:CVE-2023-38737
**DESCRIPTION:**IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/262567 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Storage Protect Operations Center	8.1

Remediation/Fixes

IBM Storage Protect Server Affected Versions	Fixing Level	Platform	Link to Fix and Instructions
8.1.0.000 - 8.1.20.xxx	8.1.21	AIX, Linux, Windows	<https://www.ibm.com/support/pages/node/588021>

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmstorage_protectMatch8.1

CPENameOperatorVersion
ibm storage protecteq8.1

CPE	Name	Operator	Version
	ibm storage protect	eq	8.1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

JSON

Related for A48042D7AC2D28023729E90E65196CF21396C140327A6F7A5DFADB5E6D7314C2