PT-2022-10229
CVE-2021-33318
·
تاريخ النشر
2022-05-16
·
تاريخ التحديث
2023-08-08
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WatsonWebserver versions 4.1.3 and below
IpMatcher versions 1.0.4.1 and below
Description
An Input Validation issue exists due to insufficient validation of input IP addresses and netmasks against the internal Matcher list of IP addresses and subnets.
Recommendations
For WatsonWebserver versions 4.1.3 and below, update to a version above 4.1.3 to resolve the issue.
For IpMatcher versions 1.0.4.1 and below, update to a version above 1.0.4.1 to resolve the issue.
As a temporary workaround, consider restricting the input of IP addresses and netmasks to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾