PT-2023-8756 · Ibm · Ibm Security Guardium

Cru3Ll0 + 1 · Publicado 2023-11-27 · Atualizado 2023-12-04 · CVE-2023-42004

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 11.3 through 11.5

Description The issue is related to improper validation of csv file contents, which could allow a remote attacker to execute malicious commands. This is due to the lack of neutralization of elements in the CSV file.

Recommendations For versions 11.3 through 11.5, consider disabling the import of CSV files until a patch is available to prevent exploitation. Restrict access to the functionality that handles CSV file contents to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-1236

Identificadores relacionados

BDU:2024-01823

CVE-2023-42004

Produtos afetados

Ibm Security Guardium

Referências · 8

• https://bdu.fstec.ru/vul/2024-01823 · Nota de Segurança
• https://t.me/cvenotify/61323 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-42004 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/265262 · Aviso do Fabricante
• https://t.me/cvenotify/62177 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-42004 · Aviso do Fabricante
• https://vuldb.com/?id.246300 · Nota
• https://ibm.com/support/pages/node/7069241 · Aviso do Fabricante