Skip to content
OpenAdvisories
Medium WID-SEC-2023-2550 2 CVEs

IBM Rational ClearQuest: Mehrere Schwachstellen

Published Oct 3, 2023 · Updated Apr 29, 2024 · Revision 3 · de-DE

Vendor: IBM Product: AIX Product: MQ Product: Rational ClearQuest Product: VIOS Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Rational ClearQuest ausnutzen, um Informationen offenzulegen.

Product

IBM Rational ClearQuest stellt eine Lösung zur Fehler- und Änderungsverfolgung zur Verfügung.

Vulnerabilities 2

  • High 7.5
    CVE-2023-32342

    IBM GSKit information disclosure

    IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerabili…

    IBM GSKit
  • High 7.5
    CVE-2023-33850

    IBM GSKit-Crypto information disclosure

    IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vuln…

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References