IBM Integration Bus: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2021-33813 EPSS 19%

  XML External Entity (XXE) Injection in JDOM

  An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

  libjdom2-java org.jdom:jdom jdom2 libjdom1-java Debian Ubuntu Azure Linux Maven
  Jun 16, 2021
• Medium 5.5
  CVE-2023-2976

  Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

  Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary di…

  Google Guava celeborn-0.6 trino-plugin-clickhouse Debian Ubuntu Azure Linux Wolfi Maven
  Jun 14, 2023

Revision history

1. 2024-05-06 #2

   Neue Updates von Red Hat aufgenommen

2. 2023-08-09 #1

   Initiale Fassung

References

• IBM Security Bulletin - 7024862 vom 2023-08-09
  https://www.ibm.com/support/pages/node/7024862
• Red Hat Security Advisory RHSA-2024:2707 vom 2024-05-06
  https://access.redhat.com/errata/RHSA-2024:2707