Security Bulletin: Vulnerabilities found in GNU screen library may affect IBM Content Collector for SAP Applications

Summary

IBM Content Collector for SAP Applications may be affected by denial of service, cause by a vulnerability found in GNU screen library.

Vulnerability Details

CVEID:CVE-2023-24626
**DESCRIPTION:**GNU Screen is vulnerable to a denial of service, caused by a flaw when installed with setuid or setgid. By sending a specially crafted SIGHUP signal to any PID, a local authenticated attacker could exploit this vulnerability to cause a denial of service or disruption of the target process.
CVSS Base score: 5.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/252305 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

Product

| VRM|Remediation
—|—|—
CP4BA - IBM Content Collector for SAP Component| 21.0.3|

Use IBM Content Collector for SAP Applications 21.0.3 IF027

Workarounds and Mitigations

None