Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM73176884A2B78CAACA4A81FFA59BE2525A97C20E7BA87A9AF9DE3F9DF5149840
HistoryJun 26, 2024 - 11:45 a.m.

Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to weaker than expected security for outbound TLS connections due to WebSphere Application Server Liberty

2024-06-2611:45:15
www.ibm.com
2
ibm cloud transformation advisor
tls vulnerability
websphere application server liberty
outbound connections
ibm x-force
cvss
remediation
red hat openshift container platform

5.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Summary

There is a vulnerability in IBM WebSphere Application Server Liberty used by IBM Cloud Transformation Advisor (CVE-2023-50312).

Vulnerability Details

CVEID:CVE-2023-50312
**DESCRIPTION:**IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274711.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/274711 for the current score.
CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Cloud Transformation Advisor 2.0.1 - 3.9.0

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now.

Product(s) Version(s) Remediation/Fix/Instructions
IBM Cloud Transformation Advisor 2.0.1 - 3.9.0 Install v3.10.0 from OperatorHub page in Red Hat OpenShift Container Platform or locally following this link.

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmcloud_transformation_advisorMatch3.
CPENameOperatorVersion
ibm cloud transformation advisoreq3.

Related

ibm 31
nessus 1
cvelist 1
prion 1
cnvd 1
nvd 1
cve 1
ibm
ibm
Security Bulletin: Vulnerability in WebSphere Application Server Liberty affect IBM Operations Analytics - Log Analysis (CVE-2023-50312)
2024-05-23 06:14:28
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in IBM WebSphere
2024-06-05 20:42:48
Security Bulletin: IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2023-50312)
2024-03-04 18:45:19
nessus
nessus
IBM WebSphere Application Server Liberty 17.0.0.3 < 24.0.0.3 (7125527)
2024-03-05 00:00:00
cvelist
cvelist
CVE-2023-50312 IBM WebSphere Application Server Liberty information disclosure
2024-03-01 02:30:11
prion
prion
Code injection
2024-03-01 03:15:00
cnvd
cnvd
IBM WebSphere Application Server Liberty Encryption Issue Vulnerability
2024-03-05 00:00:00
nvd
nvd
CVE-2023-50312
2024-03-01 03:15:06
cve
cve
CVE-2023-50312
2024-03-01 03:15:06

5.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON
Related for 73176884A2B78CAACA4A81FFA59BE2525A97C20E7BA87A9AF9DE3F9DF5149840
ibm31nessus1cvelist1prion1cnvd1nvd1cve1