CVE sync 2026-11-13T22:30:43Z
This commit is contained in:
Vulnerability Bot committed
1 parent
aa65f0c147
commit
c1444140e5
61 files changed
+6438
-713
No files matched your search
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-97683",
|
||||
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "ibm",
|
||||
"dateReserved": "2026-09-24T20:56:29.625Z",
|
||||
"datePublished": "2026-11-13T21:36:07.726Z",
|
||||
"dateUpdated": "2026-11-13T21:49:12.852Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
|
||||
"shortName": "ibm",
|
||||
"dateUpdated": "2026-11-13T21:36:07.726Z"
|
||||
},
|
||||
"title": "IBM Cyber Fraud includes components with multiple known vulnerabilities",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-693",
|
||||
"description": "CWE-693 Protection Mechanism Failure",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "IBM",
|
||||
"product": "Cyber Fraud",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "1.0.0",
|
||||
"lessThanOrEqual": "1.1.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:ibm:cyber_fraud:1.1.0:*:*:*:*:*:*:*"
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<p>IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ibm.com/support/pages/node/7295966",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"patch"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseSeverity": "LOW",
|
||||
"baseScore": 2.5,
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.1 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<p><strong>IBM strongly encourages customers to update their systems promptly.</strong></p><p>Please upgrade to at least version 1.1.1 according to the following instructions:<br/><br/><a href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud</a></p><p><a href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud</a></p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T21:49:04.702035Z",
|
||||
"id": "CVE-2026-97683",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T21:49:12.852Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
Reference in new issue
Block a user