Main Vulnerability Database SB20220720107

SB20220720107 - Denial of service in IBM UrbanCode Build

Published: July 20, 2022 Updated: October 25, 2024

Security Bulletin ID SB20220720107

Severity

Low

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Data Handling (CVE-ID: CVE-2022-29885)

The vulnerability allows a remote attacker to perform DoS attack.

The vulnerability exists due to an error in documentation for the EncryptInterceptor, which incorrectly stated that it enabled Tomcat clustering to run over an untrusted network. A remote attacker can perform a denial of service attack against the exposed EncryptInterceptor.

Remediation

Install update from vendor's website.

References

https://www.ibm.com/blogs/psirt/security-bulletin-ibm-urbancode-build-is-vulnerable-to-denial-of-service-due-to-use-of-apache-tomcat-cve-2022-29885/"
https://www.ibm.com/blogs/psirt/security-bulletin-ibm-urbancode-build-is-vulnerable-to-denial-of-service-due-to-use-of-apache-tomcat-cve-2022-29885/</a> <a
https://www.ibm.com/support/pages/node/6605023"
https://www.ibm.com/support/pages/node/6605023</a>