Lucene search

IBM6064C0CB60412348563A4D93B74F17C3B26A10454580672AEA29BB8E1E2999A7

HistoryJul 01, 2024 - 3:31 p.m.

Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to cross-site scripting due to IBM WebSphere Application Server Liberty (CVE-2024-27270)

2024-07-0115:31:30

www.ibm.com

ibm tivoli netcool impact

cross-site scripting

ibm websphere application server liberty

cve-2024-27270

vulnerability

upgrade

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

JSON

Summary

IBM WebSphere Application Server Liberty is shipped with IBM Tivoli Netcool Impact as part of its server infrastructure. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin.

Vulnerability Details

CVEID:CVE-2024-27270
**DESCRIPTION:**IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.
CVSS Base score: 4.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/284576 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Tivoli Netcool Impact	7.1.0.0 - 7.1.0.33

Remediation/Fixes

** IBM strongly recommends addressing the vulnerability now.**

Product	VRMF	APAR	Remediation
IBM Tivoli Netcool Impact	7.1.0.34	DT390137	Upgrade to IBM Tivoli Netcool Impact 7.1.0 FP34 or later

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_netcool\/impactMatch7.1.0

VendorProductVersionCPE
ibmtivoli_netcool\/impact7.1.0cpe:2.3:a:ibm:tivoli_netcool\/impact:7.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_netcool\/impact	7.1.0	cpe:2.3:a:ibm:tivoli_netcool\/impact:7.1.0:::::::*

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

JSON

Related for 6064C0CB60412348563A4D93B74F17C3B26A10454580672AEA29BB8E1E2999A7