CVE-2023-26117 — Vulnetix

CVE-2023-26117 PUBLISHED CVSS 8.699999809265137 HIGH

Es bestehen mehrere Schwachstellen in IBM MQ. Diese Fehler bestehen im AngularJS-Modul aufgrund eines Problems mit regulären Ausdrücken. Durch die Bereitstellung speziell gestalteter Regex-Eingaben kann ein entfernter, anonymer Angreifer diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.

EPSS 0.32% · 55.2th percentile

Risk Scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

EPSS Score

0.32%

55.2th percentile

Affected Products

Vendor	Product	Versions
IBM	IBM Tivoli Business Service Manager 6.2.0
HCL	HCL BigFix
IBM	IBM MQ 9.2
Fedora	Fedora Linux
IBM	IBM MQ 9.1
IBM	IBM MQ 9.0
IBM	IBM Business Automation Workflow

Exploit Intelligence

https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406323 (nist-nvd)
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406324 (nist-nvd)
https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373045 (nist-nvd)
https://stackblitz.com/edit/angularjs-vulnerability-resource-trailing-slashes-redos (nist-nvd)
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406325 (nist-nvd)
CIRCL seen: CVE-2023-26118 (circl-sighting)
CIRCL seen: CVE-2023-26118 (circl-sighting)
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406327 (circl)
https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373046 (circl)
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406326 (circl)

…and 15 more exploits

Timeline

Mar 30, 2023 CVE Published
Mar 30, 2023 EPSS Score
Mar 30, 2023 PoC Published
May 7, 2023 EPSS Score
Jun 14, 2023 EPSS Score
Aug 30, 2023 EPSS Score
Oct 7, 2023 EPSS Score
Nov 14, 2023 EPSS Score
Dec 22, 2023 EPSS Score
Jan 29, 2024 EPSS Score
Apr 15, 2024 EPSS Score
May 23, 2024 EPSS Score

References

Open in Interactive Console →