Security Bulletin: IBM Sterling B2B Integrator affected by FasterXML Jackson-data vulnerabilities (CVE-2022-42003, CVE-2022-42004)

Summary IBM Sterling B2B Integrator uses FasterXML Jackson-databind. Vulnerability Details CVEID: CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, caused by a lack of a check in in the BeanDeserializer.deserializeFromArray function. By sending a...

Security Bulletin: IBM Sterling B2B Integrator affected by XStream security vulnerabilities

Summary IBM Sterling B2B Integrator uses XStream. Vulnerability Details CVEID: CVE-2022-41966 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow. By manipulating the processed input stream at unmarshalling time, a remote attacker could exploit this...

Security Bulletin: IBM Sterling B2B Integrator is affected by vulnerability in JDOM (CVE-2021-33813)

Summary IBM Sterling B2B Integrator uses JDOM. Vulnerability Details CVEID: CVE-2021-33813 DESCRIPTION: JDOM is vulnerable to a denial of service, caused by an XXE issue in SAXBuilder. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to cause the a...

Security Bulletin: IBM Sterling B2B Integrator dashboard is vulnerable to cross-site request forgery (CVE-2022-35638)

Summary IBM Sterling B2B Integrator has addressed the cross-site request forgery security vulnerability within dashboard. Vulnerability Details CVEID: CVE-2022-35638 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site request forgery which could allow an attacker...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to cross-site scripting (CVE-2022-43578)

Summary IBM Sterling B2B Integrator has addressed the cross-site scripting security vulnerability. Vulnerability Details CVEID: CVE-2022-43578 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

CVE-2023-28723

Exposure of sensitive information to an unauthorized actor in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-28737

Improper initialization in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28397

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated to potentially enable escalation of privileges via local access...

CVE-2023-26589

Use after free in some IntelR Aptio V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access...

CVE-2023-22310

Race condition in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-36374

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper initialization in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access...

Race condition

Race condition in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Use after free in some IntelR Aptio V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access...

CVE-2023-26589

CVE-2023-26589 refers to a use-after-free vulnerability in some Intel® Aptio* V UEFI Firmware Integrator Tools, potentially allowing an authenticated, locally-present user to cause a denial of service. The issue is documented across multiple sources indicating a local-exploit vector with a high a...

CVE-2022-36374

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28737

Improper initialization in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36396

The CVE-2022-36396 issue affects Intel® Aptio* V UEFI Firmware Integrator Tools prior to iDmiEdit-Linux-5.27.06.0017, due to improper access control that may allow a privileged local user to escalate privileges. Public details confirm affected versions and suggest updating to iDmiEdit-Linux-5.27....

PT-2023-21928 · Intel · Intel(R) Aptio* V Uefi Firmware Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR Aptio V UEFI Firmware Integrator Tools affected versions not specified Description: The issue is related to improper initialization in IntelR Aptio V UEFI Firmware Integrator Tools, which may allow an authenticated user to potentially...