WID-SEC-W-2022-0616

DeutschShown in its original language — a full translation is planned for a future version.

IBM Tivoli Network Manager: Mehrere Schwachstellen

view advisory published 2022-07-07

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Dateien zu manipulieren und vertrauliche Informationen offenzulegen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-28169US	medium5.3	78.5% (100th)	—	2021-06-09
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB…
CVE-2020-25649US	high7.5	17.7% (97th)	—	2020-12-03
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The hi…

references

External citations — patches, advisories, analysis.

WID-SEC-W-2022-0616 - CSAF Versionself
WID-SEC-2022-0616 - Portal Versionself
IBM Security Advisory vom 2022-07-07external
IBM Security Advisory vom 2022-07-07external
IBM Security Bulletin 6958056 vom 2023-02-24external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan