Skip to content
OpenAdvisories
High WID-SEC-2023-0578 3 CVEs

IBM Security Guardium: Mehrere Schwachstellen

Published Mar 6, 2023 · Updated Aug 15, 2023 · Revision 3 · de-DE

Vendor: IBM Product: Maximo Asset Management Product: QRadar SIEM Product: Security Guardium 11.5 Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Security Guardium ausnutzen, um Dateien zu manipulieren, beliebigen Programmcode auszuführen oder Informationen offenzulegen.

Product

IBM Security Guardium ist eine Lösung für die Überwachung und Auditierung des Datenzugriffs.

Vulnerabilities 3

  • High 8.0
    CVE-2022-41853 Public exploit

    Remote code execution in HyperSQL DataBase

    Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath re…

    HyperSQL DataBase hsqldb hsqldb hsqldb Debian Ubuntu Maven
  • High 7.9
    CVE-2022-31159 Public exploit

    Partial Path Traversal in com.amazonaws:aws-java-sdk-s3

    The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the `downloadDirectory` method in the AWS S3 TransferManager component of the AWS SDK for Java v1 prior to version 1.12.261. Applicatio…

    AWS aws-sdk-java com.amazonaws:aws-java-sdk-s3 Maven
  • Medium 4.3
    CVE-2022-31684

    Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens

    Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where log…

    io.projectreactor.netty:reactor-netty-http Maven

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References