Medium WID-SEC-2023-0255 3 CVEs

IBM Spectrum Protect: Mehrere Schwachstellen

Published Feb 1, 2023 · Updated Feb 27, 2023 · Revision 2 · de-DE

Vendor: IBM Product: QRadar SIEM Product: Spectrum Protect < 10.1.13.1 Platform: Windows

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und einen Denial of Service zu verursachen.

Product

IBM Spectrum Protect ist eine zentralisierte Backuplösung für Systeme im Netzwerk.

Vulnerabilities 3

High 7.5

CVE-2022-45061

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Nov 9, 2022
Medium 6.8

CVE-2022-23491

Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process o…

certifi python-certifi certifi python-certifi Debian Ubuntu PyPI

Dec 7, 2022
Medium 5.9

CVE-2022-40897

pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

python3 python-pip setuptools setuptools Debian Ubuntu Azure Linux PyPI

Dec 22, 2022

Revision history

2023-02-27 #2
Neue Updates von IBM aufgenommen
2023-02-01 #1
Initiale Fassung

References

IBM Security Bulletin 6958452 vom 2023-02-27
https://www.ibm.com/support/pages/node/6958452
IBM Security Bulletin vom 2023-02-01
https://www.ibm.com/support/pages/node/6857265