Lucene search
IBMF212E7F0080FD88D3CE90F9F6C8461111AFFE1084A48EC53C21458885B1B09B5HistoryJun 12, 2023 - 8:50 a.m.
Security Bulletin:Vulnerability in certifi-2018.4.16 affects IBM Integrated Analytics System [ CVE-2022-23491]
2023-06-1208:50:41
www.ibm.com
11
0.0005 Low
EPSS
Percentile
18.3%
Summary
The certifi-2018.4.16 package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable vulnerabiltiy [CVE-2022-23491].
Vulnerability Details
CVEID:CVE-2022-23491
**DESCRIPTION:**An unspecified error in with TrustCor’s ownership also operated a business that produced spyware in Certifi has an unknown impact and attack vector.
CVSS Base score: 6.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/241627 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Integrated Analytics System | 1.0.0-1.0.27.3 |
Remediation/Fixes
IBM strongly recommends addressing the vulnerability now by upgrading to latest version.
| Product | VRMF | Remediation/First Fix |
|---|---|---|
| IBM Integrated Analytics System | 1.0.28.0 | Link to Fix Central |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm integrated analytics system | ge | 1.0.0 | |
| ibm integrated analytics system | le | 1.0.27.3 |
Related
prion
prion
Design/Logic Flaw
2022-12-07 22:15:00
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2023:0139-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2023-0140)
2023-04-17 00:00:00
mageia
mageia
Updated python-certifi packages fix security vulnerability
2023-04-15 22:03:44
redos
redos
ROS-20230619-03
2023-06-19 00:00:00
f5
f5
K000132764 : SSL Certificates in Mozilla vulnerability CVE-2022-23491
2023-02-27 00:00:00
nessus
nessus
Amazon Linux 2023 : python3-certifi (ALAS2023-2023-062)
2023-03-21 00:00:00
Amazon Linux AMI : ca-certificates (ALAS-2023-1690)
2023-02-23 00:00:00
Amazon Linux 2023 : ca-certificates (ALAS2023-2023-061)
2023-03-21 00:00:00
amazon
amazon
Important: ca-certificates
2023-02-17 00:12:00
Important: ca-certificates
2023-02-17 00:02:00
Important: ca-certificates
2023-08-03 18:35:00
fedora
fedora
[SECURITY] Fedora 36 Update: mingw-python-certifi-2022.12.7-1.fc36
2023-03-30 01:16:08
[SECURITY] Fedora 37 Update: mingw-python-certifi-2022.12.7-1.fc37
2023-03-30 01:21:30
[SECURITY] Fedora 38 Update: mingw-python-certifi-2022.12.7-1.fc38
2023-03-30 00:23:13
cve
cve
CVE-2022-23491
2022-12-07 22:15:00
ibm
ibm
veracode
veracode
Improper Certification Validation
2022-12-08 13:48:48
cvelist
cvelist
CVE-2022-23491 Removal of TrustCor root certificate
2022-12-07 21:15:53
debiancve
debiancve
CVE-2022-23491
2022-12-07 22:15:00
github
github
Certifi removing TrustCor root certificate
2022-12-07 23:05:18
redhatcve
redhatcve
CVE-2022-23491
2023-03-20 17:43:03
osv
osv
PYSEC-2022-42986
2022-12-07 22:15:00
Certifi removing TrustCor root certificate
2022-12-07 23:05:18
ubuntucve
ubuntucve
CVE-2022-23491
2022-12-07 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0704
2023-12-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0179
2023-12-24 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0534
2023-12-24 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
0.0005 Low
EPSS
Percentile
18.3%
Related for F212E7F0080FD88D3CE90F9F6C8461111AFFE1084A48EC53C21458885B1B09B5