PT-2021-5145 · Xstream +5 · Xstream +5

🗓️ 12 Mar 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 23 Views

XStream before 1.4.16 enables remote code execution via input; upgrade to 1.4.16 or use a whitelist.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by OpenSSL vulnerability (CVE-2021-3712)	2 Feb 202317:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in XStream	27 Feb 202103:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XStream affect IBM Spectrum Copy Data Management	11 Dec 202100:37	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in OpenSSL may affect IBM Spectrum Protect Backup-Archive Client (CVE-2022-0778)	29 Jun 202219:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator is vulnerable to multiple vulnerabilities due to Xstream	13 May 202214:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator was vulnerable to denial of service due to a zlib vulnerability (CVE-2018-25032)	2 Feb 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Safer Payments is vulnerable to OpenSSL Denial of Sevice Attack (CVE-2022-0778)	25 Apr 202307:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by vulnerabilities in OpenSSL	7 Dec 202323:00	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_nsxmgr_xstream_rce_cve_2021_39144.rb
github	www.github.com/drago-96/CVE-2022-0778
github	www.github.com/alcaparra/CVE-2022-1292
github	www.github.com/jas502n/CVE-2020-26259
github	www.github.com/yywing/cve-2022-0778
github	www.github.com/jkakavas/CVE-2022-0778-POC
github	www.github.com/MyBlackManba/CVE-2021-29505
github	www.github.com/rama291041610/CVE-2022-1292
github	www.github.com/greek0x0/CVE-2022-1292
github	www.github.com/li8u99/CVE-2022-1292

22 Aug 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.1 - 9.9

CVSS 210

CVSS 36.5

EPSS0.98124

SSVC