Skip to content
OpenAdvisories
Medium WID-SEC-2025-0518 2 CVEs

IBM InfoSphere Data Replication: Mehrere Schwachstellen

Published Mar 10, 2025 · Updated Mar 10, 2025 · de-DE

Vendor: IBM Product: InfoSphere Data Replication Platform: Windows

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Data Replication ausnutzen, um Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.

Product

IBM InfoSphere Data Replication bietet protokollbasierte Änderungsdatenerfassung mit Transaktionsintegrität zur Unterstützung von Big-Data-Integration und Konsolidierung sowie für maßgeschneiderte Warehousing- und Analyseinitiativen.

Vulnerabilities 2

  • High 7.5
    CVE-2023-33850

    IBM GSKit-Crypto information disclosure

    IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vuln…

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms
  • High 7.5
    CVE-2023-43642

    Missing upper bound check on chunk length in snappy-java

    snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bou…

    xerial snappy-java druid snappy-java Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References