Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to denial of service due to hjson-java (CVE-2023-39685)

Summary IBM Sterling Partner Engagement Manager uses hjson-java. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-39685 DESCRIPTION: Hjson hjson-java is vulnerable to a denial of service, caused by improper input validation. By sending ...

CVE-2023-39685

creationtimestamp| type| source ---|---|--- 2023-09-01 14:14:08+00:00| seen| https://t.me/cibsecurity/69638...

CVE-2023-39685

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

CVE-2023-39685

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

CVE-2023-39685

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

CVE-2023-39685

CVE-2023-39685 affects hjson-java libraries up to v3.0.0, where improper input validation enables DoS via a crafted JSON string (CVSS 7.5, HIGH). Affected product: hjson-java; impact: denial of service; remediation: upgrade to a version later than 3.0.0. Multiple connected sources (Red Hat, IBM b...