Vah13

**Name of the Vulnerable Software and Affected Versions** IBM WebSphere Application Server versions 7.0 through 9.0 **Description** The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session. This is due to a cross-site scripting vulnerability in the Cachemonitor component. **Recommendations** For IBM WebSphere Application Server versions 7.0 through 9.0, consider disabling the Cachemonitor component as a temporary workaround until a patch is available. Restrict access to the Web UI to minimize the risk of exploitation. Avoid using the Web UI for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TeamViewer versions prior to 13.1.1548 **Description** The issue allows attackers to potentially obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running. This is due to the storage of a password in Unicode format within the TeamViewer.exe process memory. **Recommendations** For versions prior to 13.1.1548, update to version 13.1.1548 or later to resolve the issue. As a temporary workaround, consider restricting access to workstations where TeamViewer is running to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** libarchive versions prior to 3.2.1 **Description** The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by using a CPIO archive with a large symlink. **Recommendations** For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue.