Skip to content
OpenAdvisories
Medium WID-SEC-2023-0723 2 CVEs

IBM Integration Bus: Mehrere Schwachstellen

Published Mar 22, 2023 · Updated Mar 22, 2023 · de-DE

Vendor: IBM Product: Integration Bus Product: Integration Bus 10.0.0.26 Product: Integration Bus 10.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Integration Bus ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Denial of Service Zustand herzustellen.

Product

IBM Integration Bus ist eine "lightweight" ESB, welche die Integration von SOAP oder non-SOAP Datenquellen von verschiedenen Plattformen ermöglicht.

Vulnerabilities 2

  • High 7.5
    CVE-2018-1320

    Improper Input Validation in Apache Thrift

    Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be di…

    Apache Software Foundation Apache Thrift druid druid-compat Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2019-0205 Public exploit

    Loop with Unreachable Exit Condition in Apache Thrift

    In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…

    Apache Apache Thrift druid trino Debian Azure Linux Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References