Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in elasticsearch-7.10.2.jar

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of elasticsearch-7.10.2.jar Vulnerability Details CVEID:CVE-2023-31418 DESCRIPTION: Elastic Elasticsearch is vulnerable to a denial of service, caused by uncontrolled resource consumption. By sending a moderate...

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Elastic Elasticsearch denial of service vulnerabilitiy.(CVE-2023-31418)

Summary Potential Elastic Elasticsearch denial of service vulnerabilitiy.CVE-2023-31418 has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-31418 DESCRIPTION:...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Elasticsearch denial of service vulnerabilities.

Summary Potential Elasticsearch denial of service vulnerabilitity have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-31418 DESCRIPTION: Elast...

com.sksamuel.elastic4s:elastic4s_2.10 (0.90.9.0), com.sksamuel.elasticsearch:elasticsearch-river-neo4j (0.90.9.0) +15 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.90.9)

org.elasticsearch:elasticsearch MAVEN version 0.90.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 0.90.9.0 -...

at.molindo:esi4j (>=0.3.0, <=0.3.2), com.code972:elasticsearch-analysis-hebrew (1.0) +13 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.90.11)

org.elasticsearch:elasticsearch MAVEN version 0.90.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =0.3.0, =0.3.2 - com.code972:elasticsearch-analysis-hebrew 1.0 -...

com.automattic:elasticsearch-statsd (>=2.3.0.0, <=2.3.0.2), com.evojam:play-elastic4s_2.11 (>=0.3.0, <=0.3.1) +59 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (2.3.0)

org.elasticsearch:elasticsearch MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd =2.3.0.0, =0.3.0, =0.3.1 -...

org.elasticsearch:elasticsearch-analysis-icu (0.14.2), org.elasticsearch:elasticsearch-cloud-aws (0.14.2) +10 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.14.2)

org.elasticsearch:elasticsearch MAVEN version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.1), org.elasticsearch:elasticsearch-cloud-aws (0.14.1) +10 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.14.1)

org.elasticsearch:elasticsearch MAVEN version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.1 - org.elasticsearch:elasticsearch-cloud-aws...

com.sksamuel.elastic4s:elastic4s_2.10 (>=0.90.8.0, <=0.90.8.2), com.sksamuel.elasticsearch:elasticsearch-river-neo4j (0.90.8.0) +7 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.90.8)

org.elasticsearch:elasticsearch MAVEN version 0.90.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 =0.90.8.0, =0.90.8.2 -...

com.alessandromarrella:fs2-elastic_2.12 (>=6.4.0, <=6.4.1), com.automattic:elasticsearch-statsd (6.4.2.0) +42 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (6.4.2)

org.elasticsearch:elasticsearch MAVEN version 6.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.alessandromarrella:fs2-elastic2.12 =6.4.0, =6.4.2-32.1, =6.4.2-23.1, =6.4.2-25.5, =0.0.2,...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (1.6.5), fr.pilato.spring:spring-elasticsearch (0.1.0) +1 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.20.6)

org.elasticsearch:elasticsearch MAVEN version 0.20.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 1.6.5 -...

com.code972:elasticsearch-analysis-hebrew (>=1.3, <=1.4), com.erudika:para (>=1.5.1, <=1.8.0) +35 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (1.2.1)

org.elasticsearch:elasticsearch MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.code972:elasticsearch-analysis-hebrew =1.3, =1.5.1, =1.0, =1.2.1.0, =1.2.1.0, =0.5.0-m2,...

com.github.piltt:silky-persistence_2.10 (>=1.0.3, <=1.0.57), com.github.piltt:silky-persistence_2.11 (>=1.0.3, <=1.0.57) +3 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (1.7.6)

org.elasticsearch:elasticsearch MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.3, =1.0.3, =12.0, =12.0, =12.0, =21.5 Source cves:...

com.automattic:elasticsearch-statsd (2.4.5.0), com.floragunn:dlic-search-guard-module-auditlog (2.4-5) +48 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (2.4.5)

org.elasticsearch:elasticsearch MAVEN version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 2.4.5.0 - com.floragunn:dlic-search-guard-module-auditlog 2.4...

com.bybutter.sisyphus.middleware:sisyphus-elastic (>=0.0.1-m5, <=0.0.1-m6), com.cnscud.xpower:xpower-search (>=1.0.2, <=1.0.3) +53 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (6.8.8)

org.elasticsearch:elasticsearch MAVEN version 6.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.bybutter.sisyphus.middleware:sisyphus-elastic =0.0.1-m5, =1.0.2, =2.0.4, =2.3.12, =1.3.3,...

cn.vertxup:zero-ifx-es (0.9.0), cn.vertxup:zero-vie (0.9.0) +14 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (>=8.0.0, <=8.8.2)

org.elasticsearch:elasticsearch MAVEN version =8.0.0, =0.4.0, =2.6.7, =2026.0-19, =2026.0-19, =2026.0-19, =6.12, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.0, =1.6.es801.0, =1.7.es853.0 and more Source cves: CVE-2023-31418 Source advisory: OSV:GHSA-2CQF-6XV9-F22W...

cn.vertxup:zero-ifx-es (0.9.0), cn.vertxup:zero-vie (0.9.0) +14 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (>=8.0.0, <=8.8.2)

org.elasticsearch:elasticsearch MAVEN version =8.0.0, =0.4.0, =2.6.7, =2026.0-19, =2026.0-19, =2026.0-19, =6.12, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.0, =1.6.es801.0, =1.7.es853.0 and more Source cves: CVE-2023-31418 Source advisory: GHSA-2CQF-6XV9-F22W...

com.automattic:elasticsearch-statsd (6.2.1.0), com.floragunn:dlic-search-guard-enterprise-modules (>=6.2-30.0, <=6.2.1-32.1) +23 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (6.2.1)

org.elasticsearch:elasticsearch MAVEN version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 6.2.1.0 - com.floragunn:dlic-search-guard-enterprise-modules...

org.elasticsearch:elasticsearch-analysis-icu (0.17.10), org.elasticsearch:elasticsearch-cloud-aws (0.17.10) +11 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.17.10)

org.elasticsearch:elasticsearch MAVEN version 0.17.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.10 - org.elasticsearch:elasticsearch-cloud-aw...

org.elasticsearch:elasticsearch-analysis-icu (0.18.1), org.elasticsearch:elasticsearch-cloud-aws (0.18.1) +11 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.18.1)

org.elasticsearch:elasticsearch MAVEN version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.1 - org.elasticsearch:elasticsearch-cloud-aws...