Oracle Linux 7 : rsyslog (ELSA-2020-1000)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1000 advisory. 8.24.0-52 RHEL 7.8 ERRATUM - edited patch file ID for imfile to not log useless errors also improved file-id behavior to adress newly found problems...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by AIX. AIX has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Aug 31 12:31:07 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javaaug2023advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...

The vulnerability of the IBM AIX operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the IBM AIX operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...

CVE-2023-40371

IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476...

Improper access control

IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476...

CVE-2023-40371 IBM AIX information disclosure

IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476...

CVE-2023-40371

CVE-2023-40371 affects IBM AIX 7.2, 7.3 and VIOS 3.1 via OpenSSH, allowing a non-privileged local user to access files outside allowed boundaries due to improper access controls. The IBM advisory (openssh_fix15) lists fixed interim packages: openssh.base (versions 8.1.102.2106 and 9.2.112.2000) w...

CVE-2023-40371 IBM AIX information disclosure

IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476...

Security Bulletin: AIX is affected by security restrictions bypass (CVE-2023-24329) due to Python

Summary A vulnerability in Python could allow a remote attacker to bypass security restrictions CVE-2023-24329. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2023-24329 DESCRIPTION: Python could allow a remote attacker to bypass security...

Security Bulletin: AIX is vulnerable to unauthorized file access and arbitrary code execution due to OpenSSH (CVE-2023-40371 and CVE-2023-38408)

Summary Vulnerabilities in AIX's OpenSSH could allow a non-privileged local user file access outside of those allowed CVE-2023-40371 or allow a remote attacker to execute arbitrary code CVE-2023-38408. OpenSSH is used by AIX for remote login. Vulnerability Details CVEID:CVE-2023-40371 DESCRIPTION...

Security Bulletin: CVE-2022-40609 may affect IBM Java shipped with IBM TXSeries for Multiplatforms

Summary CVE-2022-40609 may affect IBM Java shipped with IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to...

AIX is vulnerable to unauthorized file access and arbitrary code execution due to OpenSSH

IBM SECURITY ADVISORY First Issued: Wed Aug 23 08:36:37 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/opensshadvisory15.asc Security Bulletin: AIX is vulnerable to unauthorized file access and arbitrary code execution due to...

PT-2023-4594 · Ibm · Vios +1

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.2 through 7.3 VIOS version 3.1 Description: The issue is related to improper access controls in the OpenSSH implementation, which could allow a non-privileged local user to access files outside of those allowed. This could...

AIX is affected by security restrictions bypass due to Python

IBM SECURITY ADVISORY First Issued: Fri Aug 18 09:49:04 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory5.asc Security Bulletin: AIX is affected by security restrictions bypass CVE-2023-24329 due to Python...

Security Bulletin: IBM TXSeries for Multiplatforms Web Services is vulnerable to Slowloris attack which is a type of denial-of-service (DoS)

Summary IBM TXSeries for Multiplatforms Web Services is vulnerable to Slowloris attack which is a type of denial-of-service DoS. This issue has been addressed. Vulnerability Details CVEID:CVE-2023-38741 DESCRIPTION: IBM TXSeries for Multiplatforms is vulnerable to a denial of service, caused by...

Security Bulletin: Multiple vulnerabilities may affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary IBM® Runtime Environment Java™ is used by CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. The fix updates the Java Runtime Environment to resolve the following vulnerabilities. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java...

AIX : Multiple Vulnerabilities (IJ47630)

The version of AIX installed on the remote host is prior to APAR IJ47630. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ47630 advisory. - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document,...

AIX : Multiple Vulnerabilities (IJ47629)

The version of AIX installed on the remote host is prior to APAR IJ47629. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ47629 advisory. - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document,...

AIX : Multiple Vulnerabilities (IJ47597)

The version of AIX installed on the remote host is prior to APAR IJ47597. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ47597 advisory. - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document,...