VDB
CVE-2023-32342
CVE-2023-32342
PUBLISHED
Es besteht eine Schwachstelle in IBM DB2. Dieser Fehler besteht in der GSKit-Komponente aufgrund eines zeitbasierten Seitenkanals in der RSA-Entschlüsselungsimplementierung. Durch das Senden einer übermäßig großen Anzahl von Testmeldungen zur Entschlüsselung kann ein entfernter, anonymer Angreifer diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen.
EPSS 0.06% · 18.4th percentile
Risk Scores
EPSS Score
0.06%
18.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| HCL | HCL Commerce | |
| IBM | IBM Workload Scheduler | |
| IBM | IBM Tivoli Monitoring 6.3.0.7 | |
| IBM | IBM Informix | |
| IBM | IBM VIOS 4.1 | |
| IBM | IBM MQ | |
| IBM | IBM Security Verify Access | |
| IBM | IBM Rational ClearQuest 10.0 | |
| HCL | HCL Commerce <9.1.13 | |
| IBM | IBM Business Automation Workflow | |
| IBM | IBM HTTP Server 8.5 | |
| IBM | IBM MQ appliance | |
| IBM | IBM HTTP Server 9.0 | |
| IBM | IBM Rational ClearQuest 9.1 | |
| IBM | IBM VIOS 3.1 | |
| IBM | IBM AIX 7.3 | |
| IBM | IBM AIX 7.2 | |
| IBM | IBM Rational ClearQuest 9.0.2 | |
| IBM | IBM Rational ClearQuest 9.0.1 | |
| HCL | HCL Commerce <9.0.1.21 |
Exploit Intelligence
- cve-2023-22527-yara.yar (github-yara)
- cve-2023-22527-yara.yar (github-yara)
- cve-2023-22527-yara.yar (github-yara)
- cve-2023-22527-yara.yar (github-yara)
- cve-2023-22527-yara.yar (github-yara)
- cve-2023-22527-yara.yar (github-yara)
Timeline
- May 24, 2023 CVE Published
- May 31, 2023 EPSS Score
- Jul 6, 2023 EPSS Score
- Aug 11, 2023 EPSS Score
- Sep 16, 2023 EPSS Score
- Oct 22, 2023 EPSS Score
- Nov 27, 2023 EPSS Score
- Jan 2, 2024 EPSS Score
- Feb 7, 2024 EPSS Score
- Feb 8, 2024 PoC Published
- Mar 14, 2024 EPSS Score
- Apr 19, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2550.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2550 advisory
- https://www.ibm.com/support/pages/node/7130904 advisory
- https://www.ibm.com/support/pages/node/7041679 advisory
- https://www.ibm.com/support/pages/node/7149801 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2823.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2823 advisory
- https://www.ibm.com/support/pages/node/7066501 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1302.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1302 advisory
- https://www.ibm.com/support/pages/node/6998037 advisory
- https://www.ibm.com/support/pages/node/7001289 advisory
- https://www.ibm.com/support/pages/node/7007741 advisory
- https://www.ibm.com/support/pages/node/7007429 advisory
- https://www.ibm.com/support/pages/node/7014259 advisory
- https://www.ibm.com/support/pages/node/7014651 advisory
- https://www.ibm.com/support/pages/node/7027925 advisory
- https://support.hcltechsw.com/community?id=community_blog&sys_id=72d68adf1bf5c29c574121f7ec4bcbdb advisory
- https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112204 advisory
- https://www.ibm.com/support/pages/node/7160975 advisory
…and 1 more