PT-2023-30337 · Ibm · Ibm Urbancode Deploy

Published 2023-12-19 · Updated 2023-12-27 · CVE-2023-47161

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy (UCD) versions 7.1 through 7.1.2.14 IBM UrbanCode Deploy (UCD) versions 7.2 through 7.2.3.7 IBM UrbanCode Deploy (UCD) versions 7.3 through 7.3.2.2

Description The issue is related to the mishandling of input validation of an uploaded archive file, which can lead to a denial of service due to resource exhaustion.

Recommendations For versions 7.1 through 7.1.2.14, update to a version that properly handles input validation of uploaded archive files to prevent denial of service due to resource exhaustion. For versions 7.2 through 7.2.3.7, update to a version that properly handles input validation of uploaded archive files to prevent denial of service due to resource exhaustion. For versions 7.3 through 7.3.2.2, update to a version that properly handles input validation of uploaded archive files to prevent denial of service due to resource exhaustion.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-47161

Affected Products

Ibm Urbancode Deploy

References · 8

• https://ibm.com/support/pages/node/7096552 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-47161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47161 · Security Note
• https://twitter.com/CVEnew/status/1737275388395688360 · Twitter Post
• https://t.me/cvenotify/65253 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/270799 · Note
• https://t.me/cvenotify/64298 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1737285287858831839 · Twitter Post