🟡 Medium ⏱ 15–45 min Last verified: 27 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2023-50945, IBM Support Bulletin CVE: CVE-2023-50945 NVD summary: IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user. References: www.ibm.com/support/pages/node/7161947 Table of contents […]
🟡 Medium ⏱ 15–45 min Last verified: 27 March 2024 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2023-29256, IBM Support Bulletin CVE: CVE-2023-29256 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper […]
🟡 Medium ⏱ 15–45 min Last verified: 27 March 2024 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-54183, IBM Support Bulletin CVE: CVE-2024-54183 NVD summary: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows […]
🟡 Medium ⏱ 15–45 min Last verified: 26 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2023-28514, IBM Support Bulletin CVE: CVE-2023-28514 NVD summary: IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned […]
🟡 Medium ⏱ 15–45 min Last verified: 26 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2023-50946, IBM Support Bulletin CVE: CVE-2023-50946 NVD summary: IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a […]
🟡 Medium ⏱ 15–45 min Last verified: 25 March 2024 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2024-27254, IBM Support Bulletin CVE: CVE-2024-27254 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with […]
🟡 Medium ⏱ 15–45 min Last verified: 22 March 2024 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2023-47704, IBM Support Bulletin CVE: CVE-2023-47704 NVD summary: IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220. References: […]
🟡 Medium ⏱ 15–45 min Last verified: 22 March 2024 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-41783, IBM Support Bulletin CVE: CVE-2024-41783 NVD summary: IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operating system […]
🟡 Medium ⏱ 15–45 min Last verified: 22 March 2024 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2024-22351, IBM Support Bulletin CVE: CVE-2024-22351 NVD summary: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. […]
🟡 Medium ⏱ 15–45 min Last verified: 21 March 2024 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2023-35012, IBM Support Bulletin CVE: CVE-2023-35012 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused […]
