Lucene search

IBMB07EFD164AE14B22F4083B376FF7A350CAF6220A6CCECEE25BC541C7F7B15FBF

HistoryDec 11, 2023 - 12:56 p.m.

Security Bulletin: Vulnerability in Java IBM SDK (CVE-2023-22049) affects Power HMC

2023-12-1112:56:34

www.ibm.com

java ibm sdk

cve-2023-22049

power hmc

libraries component

remote attacker

cvss

hmc v10.1.1010.0

hmc v10.2.1030.0

hmc v10.3.1050.0

ibm fix central

mb04427

mf71406

mb04428

mf71407

mb04429

mf71408

mb04430

mf71409

mb04433

mf71421

mb04434

mf71422

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

Summary

Java IBM SDK is used by Power Hardware Management Console (HMC). HMC has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2023-22049
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Libraries component could allow a remote attacker to cause low integrity impacts.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261048 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
HMC V10.1.1010.0	V10.1.1010.0
HMC V10.2.1030.0	V10.2.1030.0
HMC V10.3.1050.0	V10.3.1050.0

Remediation/Fixes

The following fixes are available on IBM Fix Central at: <http://www-933.ibm.com/support/fixcentral/>

Product

VRMF

APAR

Remediation/Fix

—|—|—|—

Power HMC

V10.1.1020.0 SP2 x86

MB04427

MF71406

Power HMC

V10.1.1020.0 SP2 ppc

MB04428

MF71407

Power HMC

V10.2.1040.0 SP1 x86

MB04429

MF71408

Power HMC

V10.2.1040.0 SP1 ppc

MB04430

MF71409

Power HMC

V10.3.1050.0 x86

MB04433

MF71421

Power HMC

V10.3.1050.0 ppc

MB04434

MF71422

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmhardware_management_consoleMatchany

VendorProductVersionCPE
ibmhardware_management_consoleanycpe:2.3:a:ibm:hardware_management_console:any:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	hardware_management_console	any	cpe:2.3:a:ibm:hardware_management_console:any:::::::*

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

Related for B07EFD164AE14B22F4083B376FF7A350CAF6220A6CCECEE25BC541C7F7B15FBF