{
  "document" : {
    "aggregate_severity" : {
      "text" : "mittel"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "IBM WebSphere Application Server ist ein J2EE-Applikationsserver.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein lokaler Angreifer kann eine Schwachstelle in IBM WebSphere Application Server ausnutzen, um Informationen offenzulegen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- UNIX\n- Linux\n- Windows\n- Sonstiges",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2023-1592 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1592.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2023-1592 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1592"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7027925 vom 2023-09-01",
      "url" : "https://www.ibm.com/support/pages/node/7027925"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7029364 vom 2023-08-28",
      "url" : "https://www.ibm.com/support/pages/node/7029364"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7014649 vom 2023-07-26",
      "url" : "https://www.ibm.com/support/pages/node/7014649"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7014401 vom 2023-07-25",
      "url" : "https://www.ibm.com/support/pages/node/7014401"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7009625 vom 2023-07-05",
      "url" : "https://www.ibm.com/support/pages/node/7009625"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin 7009537 vom 2023-07-05",
      "url" : "https://www.ibm.com/support/pages/node/7009537"
    }, {
      "category" : "external",
      "summary" : "IBM Security Bulletin vom 2023-06-28",
      "url" : "https://www.ibm.com/support/pages/node/7007857"
    } ],
    "source_lang" : "en-US",
    "title" : "IBM WebSphere Application Server: Schwachstelle ermöglicht Offenlegung von Informationen",
    "tracking" : {
      "current_release_date" : "2023-08-31T22:00:00.000+00:00",
      "generator" : {
        "date" : "2024-08-15T17:53:13.067+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.3.5"
        }
      },
      "id" : "WID-SEC-W-2023-1592",
      "initial_release_date" : "2023-06-28T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2023-06-28T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2023-07-04T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2023-07-24T22:00:00.000+00:00",
        "number" : "3",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2023-07-25T22:00:00.000+00:00",
        "number" : "4",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2023-08-27T22:00:00.000+00:00",
        "number" : "5",
        "summary" : "Neue Updates von IBM aufgenommen"
      }, {
        "date" : "2023-08-31T22:00:00.000+00:00",
        "number" : "6",
        "summary" : "Neue Updates von IBM aufgenommen"
      } ],
      "status" : "final",
      "version" : "6"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "category" : "product_name",
        "name" : "IBM Maximo Asset Management 7.6.1",
        "product" : {
          "name" : "IBM Maximo Asset Management 7.6.1",
          "product_id" : "389168",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:ibm:maximo_asset_management:7.6.1"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "IBM Rational ClearCase",
        "product" : {
          "name" : "IBM Rational ClearCase",
          "product_id" : "T004180",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:ibm:rational_clearcase:-"
          }
        }
      }, {
        "branches" : [ {
          "category" : "product_name",
          "name" : "IBM Rational ClearQuest 9.0.1",
          "product" : {
            "name" : "IBM Rational ClearQuest 9.0.1",
            "product_id" : "433842",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:rational_clearquest:9.0.1"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "IBM Rational ClearQuest 9.0.2",
          "product" : {
            "name" : "IBM Rational ClearQuest 9.0.2",
            "product_id" : "T021437",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:rational_clearquest:9.0.2"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "IBM Rational ClearQuest 9.1",
          "product" : {
            "name" : "IBM Rational ClearQuest 9.1",
            "product_id" : "T021438",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:rational_clearquest:9.1"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "IBM Rational ClearQuest 10.0",
          "product" : {
            "name" : "IBM Rational ClearQuest 10.0",
            "product_id" : "T027869",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:rational_clearquest:10.0"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Rational ClearQuest"
      }, {
        "category" : "product_name",
        "name" : "IBM Security Identity Manager",
        "product" : {
          "name" : "IBM Security Identity Manager",
          "product_id" : "T023840",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:ibm:security_identity_manager:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "IBM Tivoli Monitoring 6.3.0.7",
        "product" : {
          "name" : "IBM Tivoli Monitoring 6.3.0.7",
          "product_id" : "342008",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:ibm:tivoli_monitoring:6.3.0.7"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "IBM Tivoli Netcool/OMNIbus 8.1.0",
        "product" : {
          "name" : "IBM Tivoli Netcool/OMNIbus 8.1.0",
          "product_id" : "T026819",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:ibm:tivoli_netcool%2fomnibus:8.1.0_fp30"
          }
        }
      }, {
        "branches" : [ {
          "category" : "product_name",
          "name" : "IBM WebSphere Application Server 8.5",
          "product" : {
            "name" : "IBM WebSphere Application Server 8.5",
            "product_id" : "703851",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:websphere_application_server:8.5"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "IBM WebSphere Application Server 9.0",
          "product" : {
            "name" : "IBM WebSphere Application Server 9.0",
            "product_id" : "703852",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:ibm:websphere_application_server:9.0"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "WebSphere Application Server"
      } ],
      "category" : "vendor",
      "name" : "IBM"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2023-35890",
    "notes" : [ {
      "category" : "description",
      "text" : "Es existiert eine Schwachstelle in IBM WebSphere Application Server. Durch eine falsche Kodierung in einer lokalen Konfigurationsdatei kommt es zu einer Verminderung der Sicherheit. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen."
    } ],
    "product_status" : {
      "known_affected" : [ "433842", "T027869", "T021438", "T021437", "T004180", "389168", "T023840", "342008", "703851", "703852", "T026819" ]
    },
    "release_date" : "2023-06-28T22:00:00.000+00:00",
    "title" : "CVE-2023-35890"
  } ]
}