DeutschShown in its original language — a full translation is planned for a future version.
IBM Security Verify Access: Mehrere Schwachstellen
view advisory published 2022-07-06
Ein entfernter anonymer, authentisierter oder lokaler Angreifer oder ein Angreifer aus dem angrenzenden Netzwerk kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern, Informationen zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.
01
describes (19)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22465US | high7.8 | — | ||
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions. IBM X-Fo… | ||||
| CVE-2022-22464US | high7.5 | — | ||
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly s… | ||||
| CVE-2022-22463US | medium6.5 | — | ||
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, whic… | ||||
| CVE-2022-22370US | medium5.4 | — | ||
IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… | ||||
| CVE-2022-23308US | high7.5 | — | ||
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. | ||||
| CVE-2021-3712US | high7.4 | Exploit | ||
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This cont… | ||||
| CVE-2021-23841US | medium5.9OT elevated | Exploit | ||
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate… | ||||
| CVE-2021-23840US | high7.5 | Exploit | ||
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable… | ||||
| CVE-2020-28196US | high7.5 | — | ||
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support f… | ||||
| CVE-2019-6285US | medium6.5 | — | ||
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash)… | ||||
| CVE-2018-20574US | medium6.5 | — | ||
The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a… | ||||
| CVE-2018-20573US | medium6.5 | — | ||
The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a c… | ||||
| CVE-2018-20217US | medium5.3 | — | ||
A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES… | ||||
| CVE-2018-5730US | low3.8 | — | ||
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "link… | ||||
| CVE-2017-11692US | high7.5 | — | ||
The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a… | ||||
| CVE-2010-4021US | low2.1 | — | ||
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authent… | ||||
| CVE-2010-4020US | medium6.3 | — | ||
MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-… | ||||
| CVE-2010-1324US | low3.7 | — | ||
MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain pri… | ||||
| CVE-2010-1323US | low3.7 | — | ||
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2022-0602 - CSAF Versionself
- WID-SEC-2022-0602 - Portal Versionself
- IBM Security Advisory vom 2022-07-06external
- IBM Security Advisory vom 2022-07-06external
- IBM Security Advisory vom 2022-07-06external
- IBM Security Advisory vom 2022-07-06external
- IBM Security Bulletin 7108821 vom 2024-01-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan