CVE-2023-30441 IBM Java information disclosure
Attackers can expose sensitive information in IBM Java Runtime Environment through a combination of flaws and specific configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-30441?
CVE-2023-30441 is a high-severity vulnerability in Ibm Infosphere Information Server, published on 29 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
Weakness: CWE-327
Which versions are affected by CVE-2023-30441?
It affects 4 products.
Products include Ibm Infosphere Information Server, Ibm Java, Ibm Websphere Application Server, Ibm Z\/Transaction Processing Facility.
How do I fix CVE-2023-30441?
Upgrade to a fixed version.
Is CVE-2023-30441 being exploited?
There is no known exploitation of CVE-2023-30441 in the wild and no public exploit code.
Other vulnerabilities in Ibm Infosphere Information Server
Sources
Also known as GHSA-2v8w-cv2x-fj9v.