{
  "document" : {
    "aggregate_severity" : {
      "text" : "mittel"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "IBM WebSphere Application Server ist ein J2EE-Applikationsserver.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM WebSphere Application Server ausnutzen, um einen Denial of Service Angriff durchzuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- MacOS X\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2024-0780 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0780.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2024-0780 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0780"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin vom 2024-04-03",
      "url" : "https://www.ibm.com/support/pages/node/7145809"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7156263 vom 2024-06-03",
      "url" : "https://www.ibm.com/support/pages/node/7156263"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7158055 vom 2024-06-20",
      "url" : "https://www.ibm.com/support/pages/node/7158055"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7157976 vom 2024-06-26",
      "url" : "https://www.ibm.com/support/pages/node/7157976"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7158959 vom 2024-06-27",
      "url" : "https://www.ibm.com/support/pages/node/7158959"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7159714 vom 2024-07-05",
      "url" : "https://www.ibm.com/support/pages/node/7159714"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7173194 vom 2024-10-16",
      "url" : "https://www.ibm.com/support/pages/node/7173194"
    }, {
      "category" : "external",
      "summary" : "HCL Security Advisory",
      "url" : "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115352"
    }, {
      "category" : "external",
      "summary" : "HCL BigFix Advisory vom 2024-11-07",
      "url" : "https://support.hcl-software.com/community?id=community_blog&sys_id=c054a21093b5d2500dddf87d1dba102d"
    } ],
    "source_lang" : "en-US",
    "title" : "IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service",
    "tracking" : {
      "current_release_date" : "2024-11-06T23:00:00.000+00:00",
      "generator" : {
        "date" : "2024-11-07T10:39:52.171+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.3.8"
        }
      },
      "id" : "WID-SEC-W-2024-0780",
      "initial_release_date" : "2024-04-03T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2024-04-03T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2024-06-02T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2024-06-19T22:00:00.000+00:00",
        "number" : "3",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2024-06-26T22:00:00.000+00:00",
        "number" : "4",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2024-07-07T22:00:00.000+00:00",
        "number" : "5",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2024-10-15T22:00:00.000+00:00",
        "number" : "6",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2024-11-03T23:00:00.000+00:00",
        "number" : "7",
        "summary" : "Neue Updates von HCL aufgenommen"
      }, {
        "date" : "2024-11-06T23:00:00.000+00:00",
        "number" : "8",
        "summary" : "Neue Updates aufgenommen"
      } ],
      "status" : "final",
      "version" : "8"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version",
          "name" : "Compliance",
          "product" : {
            "name" : "HCL BigFix Compliance",
            "product_id" : "T038823",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:hcltech:bigfix:compliance"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "BigFix"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "9.0-9.0.1.21",
          "product" : {
            "name" : "HCL Commerce 9.0-9.0.1.21",
            "product_id" : "T038746",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:hcltechsw:commerce:9.0_-_9.0.1.21"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "9.1.0-9.1.15",
          "product" : {
            "name" : "HCL Commerce 9.1.0-9.1.15",
            "product_id" : "T038747",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:hcltechsw:commerce:9.1.0_-_9.1.15"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Commerce"
      } ],
      "category" : "vendor",
      "name" : "HCL"
    }, {
      "branches" : [ {
        "category" : "product_name",
        "name" : "IBM Business Automation Workflow",
        "product" : {
          "name" : "IBM Business Automation Workflow",
          "product_id" : "T024465",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:ibm:business_automation_workflow:traditional"
          }
        }
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "9.2",
          "product" : {
            "name" : "IBM License Metric Tool 9.2",
            "product_id" : "T031605",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:license_metric_tool:9.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "License Metric Tool"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "9.1.0",
          "product" : {
            "name" : "IBM MQ 9.1.0",
            "product_id" : "T021105",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:mq:9.1.0"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "9.2.0",
          "product" : {
            "name" : "IBM MQ 9.2.0",
            "product_id" : "T021106",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:mq:9.2.0"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "IBM MQ",
          "product" : {
            "name" : "IBM MQ",
            "product_id" : "T021398",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:mq:-"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "9.3.0",
          "product" : {
            "name" : "IBM MQ 9.3.0",
            "product_id" : "T026459",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:mq:9.3.0"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "MQ"
      }, {
        "category" : "product_name",
        "name" : "IBM SPSS",
        "product" : {
          "name" : "IBM SPSS",
          "product_id" : "T013570",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:ibm:spss:-"
          }
        }
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "for multiplatforms_9.1",
          "product" : {
            "name" : "IBM TXSeries for multiplatforms_9.1",
            "product_id" : "T015903",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:txseries:for_multiplatforms_9.1"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "for multiplatforms_8.2",
          "product" : {
            "name" : "IBM TXSeries for multiplatforms_8.2",
            "product_id" : "T015904",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:txseries:for_multiplatforms_8.2"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "for multiplatforms_8.1",
          "product" : {
            "name" : "IBM TXSeries for multiplatforms_8.1",
            "product_id" : "T015905",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:txseries:for_multiplatforms_8.1"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "TXSeries"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<Liberty 24.0.0.5",
          "product" : {
            "name" : "IBM WebSphere Application Server <Liberty 24.0.0.5",
            "product_id" : "T033872"
          }
        }, {
          "category" : "product_version",
          "name" : "Liberty 24.0.0.5",
          "product" : {
            "name" : "IBM WebSphere Application Server Liberty 24.0.0.5",
            "product_id" : "T033872-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:websphere_application_server:24.0.0.5"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "WebSphere Application Server"
      } ],
      "category" : "vendor",
      "name" : "IBM"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2024-27268",
    "notes" : [ {
      "category" : "description",
      "text" : "Es besteht eine Schwachstelle in IBM WebSphere Application Server. Dieser Fehler aufgrund einer unsachgemäßen Bereinigung von Eingaben. Durch das Senden einer speziell gestalteten Anfrage kann ein entfernter, anonymer Angreifer diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen."
    } ],
    "product_status" : {
      "known_affected" : [ "T015905", "T015904", "T015903", "T038747", "T038746", "T038823", "T033872", "T013570", "T021105", "T026459", "T021106", "T024465", "T031605", "T021398" ]
    },
    "release_date" : "2024-04-03T22:00:00.000+00:00",
    "title" : "CVE-2024-27268"
  } ]
}