2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:terracotta:10.15.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:terracotta:10.15.0:ifix23:*:*:*:*:*:*","cpe:2.3:a:ibm:terracotta:11.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:terracotta:11.1.0:ifix5:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"Terracotta","vendor":"IBM","versions":[{"lessThanOrEqual":"10.15.0 IF23","status":"affected","version":"10.15.0","versionType":"semver"},{"lessThanOrEqual":"11.1.0 IF5","status":"affected","version":"11.1.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:terracotta:*:*:*:*:*:*:*:*","matchCriteriaId":"F05CF050-F848-49C6-B5D3-E5EEFEEBD1C1","versionEndExcluding":"10.15.0.23","versionStartIncluding":"10.15.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:terracotta:*:*:*:*:*:*:*:*","matchCriteriaId":"E6AC7753-A19D-4BB2-8951-170173B79B00","versionEndExcluding":"11.1.0.5","versionStartIncluding":"11.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way."},{"lang":"es","value":"Aplicaciones que utilizan versiones afectadas de Ehcache 3.x pueden experimentar un rendimiento degradado de escritura en caché si la aplicación que utiliza Ehcache utiliza claves procedentes de (maliciosas) partes externas de una manera sin filtrar/sin sal."}],"id":"CVE-2025-2529","lastModified":"2026-10-08T11:10:00.250","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":2.9,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":1.4,"impactScore":1.4,"source":"psirt@us.ibm.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-2529","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-10-16T13:30:24.959058Z","version":"2.0.3"}}]},"published":"2025-10-15T16:15:34.287","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7247977"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-228"}],"source":"psirt@us.ibm.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|