CVE-2023-50300

概要

参考情報

• ibm.com/support/pages/node/7246882 · Vendor Advisory

transformation extender advanced のその他の脆弱性

• CVE-2023-49886緊急 9.8IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java de…
• CVE-2023-49883高 7.5IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier…
• CVE-2023-49881高 8.8IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonat…
• CVE-2023-50301中 4.4IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user.
• CVE-2021-29883中 4.3IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on authorization token…