CVE-2023-30441: IBM Java information disclosure
First published: Thu Apr 27 2023(Updated: )
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Infosphere Information Server | =11.7 | |
| IBM Java | >=8.0.7.0<8.0.7.15 | |
| Ibm Websphere Application Server | >=8.5.0.0<8.5.5.23 | |
| Ibm Websphere Application Server | ||
| Ibm Websphere Application Server | =9.0.0.0 | |
| IBM Cloud Pak for Business Automation | =1.1 | |
| IBM z/Transaction Processing Facility | <=1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-30441.
What is the affected software?
The affected software is IBM QRadar SIEM version 7.5.0 to 7.5.0 UP6.
What is the severity of CVE-2023-30441?
The severity of CVE-2023-30441 is rated as high with a value of 7.5.
What is the description of the vulnerability?
The vulnerability in IBM Runtime Environment could expose sensitive information using a combination of flaws and configurations.
How can I fix CVE-2023-30441?
To fix CVE-2023-30441, IBM recommends updating to a version of IBM QRadar SIEM that is not affected by this vulnerability.
- collector/nvd-index
- agent/type
- agent/weakness
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/severity
- agent/references
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm infosphere information server
- version/ibm infosphere information server/11.7
- canonical/ibm java
- version/ibm java/8.0.7.0
- canonical/ibm websphere application server
- version/ibm websphere application server/8.5.0.0
- version/ibm websphere application server/9.0.0.0
- canonical/ibm cloud pak for business automation
- version/ibm cloud pak for business automation/1.1
- canonical/ibm qradar siem
- version/ibm qradar siem/7.5.0 - 7.5.0 up6