Lucene search

K
ibmIBMB1DC3BC65691DE0DC543F13D3ECD7DE4D531289900209B655A8BB06A72ECD8B9
HistorySep 12, 2024 - 7:54 p.m.

Security Bulletin: IBM Transformation Extender Advanced v10.0.x is affected by a IBM WebSphere Application Server Liberty vulnerability

2024-09-1219:54:29
www.ibm.com
5
ibm
transformation extender advanced
websphere application server
liberty
information disclosure vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

High

Summary

IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable to IBM WebSphere Application Server Liberty information disclosure vulnerability.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
Transformation Extender Advanced 10.0

Remediation/Fixes

To remediate this vulnerability, please follow the instructions at

<https://www.ibm.com/support/pages/security-bulletin-ibm-websphere-application-server-liberty-vulnerable-information-disclosure-cve-2023-50314&gt;

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmtransformation_extender_advancedMatch10.0
VendorProductVersionCPE
ibmtransformation_extender_advanced10.0cpe:2.3:a:ibm:transformation_extender_advanced:10.0:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

High

Related for B1DC3BC65691DE0DC543F13D3ECD7DE4D531289900209B655A8BB06A72ECD8B9