CVE-2023-45190

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/268754 · VDB Entry
• ibm.com/support/pages/node/7116045 · Patch

engineering lifecycle optimization のその他の脆弱性

• CVE-2024-52890中 6.1IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to no validation of URIs…
• CVE-2023-45191高 7.5IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brut…
• CVE-2023-45187高 8.8IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authentica…
• CVE-2021-29844高 8.8IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthor…
• CVE-2021-29786中 6.5IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.