VDB
CVE-2023-22602
CVE-2023-22602
PUBLISHED
Es existiert eine Schwachstelle in IBM WebSphere Service Registry and Repository. Die integrierten Komponenten Apache Shiro und Spring Boot verwenden unterschiedliche Techniken zum Pattern-Matching, was beim Verarbeiten einer speziell gestalteten HTTP-Anfrage zu einem Fehler führt. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
EPSS 0.22% · 44.3th percentile
Risk Scores
EPSS Score
0.22%
44.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell Secure Connect Gateway <5.34.00.16 | |
| Red Hat | Red Hat Enterprise Linux Integration Camel for Spring Boot <3.20.1 | |
| Red Hat | Red Hat OpenShift Application Runtimes | |
| Dell | Dell NetWorker | |
| IBM | IBM WebSphere Service Registry and Repository 8.5 | |
| Amazon | Amazon Linux 2 | |
| Red Hat | Red Hat Integration Camel Extensions for Quarkus 1 | |
| Red Hat | Red Hat Integration | |
| Dell | Dell Data Protection Advisor <19.12 | |
| Red Hat | Red Hat OpenShift Container Platform <4.10.62 | |
| Red Hat | Red Hat Enterprise Linux | |
| Red Hat | Red Hat Enterprise Linux Apache Camel 1 |
Exploit Intelligence
Timeline
- Jan 14, 2023 CVE Published
- Jan 15, 2023 EPSS Score
- Feb 25, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 17, 2023 EPSS Score
- Aug 7, 2023 EPSS Score
- Sep 16, 2023 EPSS Score
- Oct 27, 2023 EPSS Score
- Dec 7, 2023 EPSS Score
- Jan 17, 2024 EPSS Score
- Feb 26, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1142.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1142 advisory
- https://access.redhat.com/errata/RHSA-2023:2100 advisory
- https://access.redhat.com/errata/RHSA-2023:3179 advisory
- https://access.redhat.com/errata/RHSA-2023:3193 advisory
- https://access.redhat.com/errata/RHSA-2023:3622 advisory
- https://access.redhat.com/errata/RHSA-2023:3667 advisory
- https://access.redhat.com/errata/RHSA-2023:3626 advisory
- https://access.redhat.com/errata/RHSA-2023:3625 advisory
- https://access.redhat.com/errata/RHSA-2023:3906 advisory
- https://access.redhat.com/errata/RHSA-2023:3954 advisory
- https://alas.aws.amazon.com/AL2/ALAS-2023-2165.html advisory
- https://access.redhat.com/errata/RHSA-2023:4506 advisory
- https://access.redhat.com/errata/RHSA-2023:4507 advisory
- https://access.redhat.com/errata/RHSA-2023:4505 advisory
- https://access.redhat.com/errata/RHSA-2023:4509 advisory
- https://access.redhat.com/errata/RHSA-2023:4612 advisory
- https://access.redhat.com/errata/RHSA-2023:4919 advisory
- https://access.redhat.com/errata/RHSA-2023:4921 advisory
- https://access.redhat.com/errata/RHSA-2023:4924 advisory
…and 16 more