Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities [CVE-2018-8909, CVE-2021-41100 and CVE-2021-41119]

Summary IBM Security Guardium has fixed these vulnerabilities Vulnerability Details CVEID:CVE-2018-8909 DESCRIPTION: Wire App for Android could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../...

CVE-2021-41119

CVE-2021-41119 affects Wire-server (back-end service). A denial-of-service vulnerability exists in pre-2022-03-01 releases where a crafted JSON object can trigger a hash collision, causing the parser to run in at least quadratic time and potentially exhaust server resources on heavily loaded inst...