PT-2023-8971

🗓️ 17 Jun 2023 00:00:00Reported by Positive TechnologiesType

Shadow-utils may leak password in memory if a double password prompt fails to clear the first entry.

Reporter	Title	Published	Views	Family All 309
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management	25 Apr 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container UBI updates	2 Feb 202414:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in shadow-utils library (CVE-2023-4641) affects Power HMC.	10 Sep 202415:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance - Identity Manager has multiple vulnerabilities	29 Apr 202502:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from shadow-utils, procps-ng, containerd, urllib3, nghttp2 and Golang	15 Dec 202307:33	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several issues due to open source packages	19 Nov 202514:30	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several issues due to open source packages	28 Nov 202519:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	28 Feb 202417:18	–	ibm

Source	Link
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47
bugzilla	www.bugzilla.suse.com/1176006
osv	www.osv.dev/vulnerability/BELL-CVE-2023-4641
bugzilla	www.bugzilla.suse.com/1182850
twitter	www.twitter.com/VulmonFeeds/status/1704647085591814639
osv	www.osv.dev/vulnerability/SUSE-SU-2023:4024-1
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.13
bugzilla	www.bugzilla.suse.com/1205502
errata	www.errata.almalinux.org/9/ALSA-2023-6632.html
osv	www.osv.dev/vulnerability/CVE-2023-4641

09 Apr 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.14.7 - 5.5

CVSS 23.3

EPSS0.00428

SSVC