Vulnerabilidades

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or information disclosure.

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the application server and sends crafted responses to the plug-in.

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security controls, spoof…

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…

IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker to bypass authentication due to the use of a hardcoded credential in the FlashCopy Manager (FCM) authentication mechanism. The application contains a static credential…

IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.

IBM Engineering Workflow Management 7.0.2 hasta 7.0.2 Interim Fix 035, 7.0.3 hasta 7.0.3 Interim Fix 017, y 7.1 hasta 7.1 Interim Fix 004 es vulnerable a la inyección de encabezados HTTP, causada por una validación incorrecta de la entrada por parte de los encabezados HOST. Esto podría permitir a un atacante realizar…

IBM Db2 on Cloud Pak for Data y Db2 Warehouse on Cloud Pak for Data versiones 4.8, 5.0, 5.1, 5.2 y 5.3 podrían permitir a un usuario autenticado eludir la validación del lado del cliente y manipular los datos de entrada utilizando técnicas de hombre en el medio.

IBM Engineering Workflow Management 7.0.3 hasta 7.0.3 Interim Fix 020, y 7.1 hasta 7.1 Interim Fix 007 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a un usuario autenticado incrustar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista, lo que podría…

Las versiones 4.8, 5.0, 5.1, 5.2, 5.3 de IBM Db2 en Cloud Pak for Data y Db2 Warehouse en Cloud Pak for Data podrían permitir a un usuario privilegiado realizar operaciones y obtener información sensible fuera de su autoridad debido a una validación de token indebida.

IBM Db2 on Cloud Pak for Data y Db2 Warehouse on Cloud Pak for Data versiones 4.8, 5.0, 5.1, 5.2, 5.3 podrían permitir a un usuario autenticado causar una denegación de servicio al crear nuevas bases de datos debido a una asignación incorrecta de recursos.

IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

IBM Security QRadar EDR 3.12 hasta 3.12.24 almacena credenciales de usuario en texto plano que pueden ser leídas por un usuario privilegiado local.

IBM WebSphere Application Server 9.0 y 8.5 se ve afectado por una validación incorrecta de datos proporcionados por el usuario durante la deserialización al usar el componente SAML Web Single Sign-On. Esto podría resultar en ejecución remota de código a través de una solicitud HTTP manipulada cuando se combina con una…

IBM WebSphere Application Server 9.0 y 8.5 es vulnerable a una posible ejecución remota de código debido a la deserialización de datos no confiables a través de puntos finales JAX-WS con WS-Security.

IBM WebSphere Servidor de Aplicaciones 9.0 y 8.5 es vulnerable a la ejecución remota de código causada por la elusión de controles de seguridad.

IBM WebSphere Servidor de Aplicaciones 9.0 y 8.5 es vulnerable a la suplantación de identidad.

IBM i Access Family 1.1.5.0 hasta 1.1.9.12 IBM i Access Client Solutions (ACS) es vulnerable a ejecución remota de código cuando se configura para escuchar solicitudes de IBM i Navigator.

IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbitrary file read in the asperahttpd component. An authenticated user may be able to take advantage…