Summary
Ein entfernter Angreifer oder ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in IBM VIOS und IBM AIX ausnutzen, um Informationen offenzulegen oder um beliebigen Code auszuführen.
Product
IBM Virtual I/O Server (VIOS) bietet Virtualisierungsfunktionen.
AIX ist ein Unix Betriebssystem von IBM.
Vulnerabilities 2
-
High 8.8
Remote Code Execution in pypa/setuptools
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index …
-
Medium 4.2
Request body not stripped after redirect in urllib3
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body…
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Advisory vom 2024-08-12
https://aix.software.ibm.com/aix/efixes/security/python_advisory11.asc
-
IBM Security Bulletin vom 2024-08-12
https://www.ibm.com/support/pages/node/7165344