Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM License Metric Tool ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.
Product
Das IBM License Metric Tool dient der Lizenzverwaltung für IBM Produkte.
Vulnerabilities 2
-
Medium 5.3
fugit parse and parse_nat stall on lengthy input
fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call…
-
Medium 4.0
Server-Side Request Forgery in axios
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Bulletin vom 2024-09-16
https://www.ibm.com/support/pages/node/7168648
-
IBM Security Bulletin vom 2024-09-16
https://www.ibm.com/support/pages/node/7168652