SB2024090929 - Multiple vulnerabilities in IBM Maximo Application Suite - Manage Component

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024090929

SB2024090929 - Multiple vulnerabilities in IBM Maximo Application Suite - Manage Component

Published: September 9, 2024

Security Bulletin ID SB2024090929
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Use of a broken or risky cryptographic algorithm (CVE-ID: CVE-2023-50313)

The vulnerability allows an attacker in adjacent network to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. An attacker in adjacent network can gain unauthorized access to sensitive information on the system.


2) Resource exhaustion (CVE-ID: CVE-2024-25026)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when handling HTTP requests. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References