Information disclosure in Requests - CVE-2023-32681

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU77164

Information disclosure in Requests - CVE-2023-32681

Published: June 12, 2023 / Updated: June 28, 2024


Vulnerability identifier: #VU77164
CSH Severity: Medium
CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-32681
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. A remote attacker can gain unauthorized access to sensitive information on the system.


Affected software

Requests
PowerStore 1000X
PowerStore 3000X
PowerStore 5000X
PowerStore 7000X
PowerStore 9000X
PowerStoreX OS
Junos cRPD
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Availability Extension 12
SUSE Linux Enterprise Software Development Kit 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Oracle Solaris
Public Cloud Module
SUSE Manager Client Tools for SLE
Advanced Systems Management Module
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Desktop
Ubuntu
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
openSUSE Leap
openEuler
Fedora
Node Health Check Operator
Self Node Remediation Operator
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
VMware Tanzu Operations Manager
Netezza Appliance
QRadar App SDK
Guardium Data Security Center (GDSC)
PowerVault ME5
ObjectScale
APEX Cloud Platform for Microsoft Azure
Cloud Pak for Network Automation
PowerStore T
Cinder Plug-in
QRadar Assistant
Dell EMC PowerStore Family Operating System
IBM Cloud Pak for Watson AIOps
Cognos Dashboards on Cloud Pak for Data
Storage Resource Manager
SOAR QRadar Plugin App
Storage Ceph
IBM QRadar Incident Forensics
Maximo Application Suite - IoT Component
IBM supplied MQ Advanced container images
Security Verify Governance - Identity Manager virtual appliance
IBM Netezza for Cloud Pak for Data
Robotic Process Automation for Cloud Pak
IBM Cloud Pak for Data System
IBM Concert Software
Service Telemetry Framework
OpenShift Pipelines
Migration Toolkit for Virtualization
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Red Hat Advanced Cluster Security for Kubernetes
IBM Cloud Pak for Data Scheduling
IBM Cloud Pak for Business Automation
IBM Observability with Instana
IBM Process Mining
Spectrum Discover
IBM MQ Operator
IBM Fusion HCI
APEX Cloud Platform for Red Hat OpenShift
IBM Cloud Transformation Advisor
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Decision Optimization for Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Sterling Connect:Direct Web Services
Red Hat Satellite
IBM Maximo Application Suite
IBM Workload Scheduler
IBM Spectrum Protect Plus
IBM Robotic Process Automation
IBM Automation Decision Services
Juniper Cloud Native Router
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
QRadar Suite
Splunk Enterprise
Splunk Add-on Builder
RecoverPoint for Virtual Machines
IBM Qradar SIEM
AMQ Broker
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3-requests (Ubuntu package)
python-requests (Ubuntu package)
python38-wcwidth
python2-pluggy
python2-PyMySQL
python38-PyMySQL
python39-PyMySQL
python39-toml
python38-pluggy
python2-docutils
python2-markupsafe
python2-Cython
python38-Cython
python2-wheel
python2-wheel-wheel
python38-wheel-wheel
python38-wheel
rh-python38-python-wheel (Red Hat package)
python39-wheel
python39-wheel-wheel
python2-scipy
automation-eda-controller (Red Hat package)
python2-funcsigs
python2-backports
python2-ipaddress
python38-markupsafe
python38-asn1crypto
python38-atomicwrites
python38-scipy
python2-sqlalchemy
python-sqlalchemy-doc
python-nose-docs
python2-nose
python2-py
python39-scipy
python2-pysocks
python38-pysocks
python39-pysocks
python38-py
python2-pytest-mock
python2-six
python38-six
python38-cffi
python2-numpy-doc
python2-numpy
python2-numpy-f2py
python39-cffi
python39-six
python2-dns
python2-setuptools_scm
python38-numpy-doc
python38-numpy
python38-numpy-f2py
python39-numpy
python39-numpy-doc
python39-numpy-f2py
python2-urllib3
python38-urllib3
python39-urllib3
python2-mock
python2-pygments
requests (Ubuntu package)
python38-pyparsing
python2-babel
babel
python2-idna
python38-babel
python2-psycopg2-tests
python-psycopg2-doc
python2-psycopg2-debug
python2-psycopg2
python2-docs
python2-docs-info
python2-tools
python2-tkinter
python2-test
python2-debug
python2-devel
python2-libs
python2
python38-cryptography
python38-psycopg2-tests
python38-psycopg2-doc
python38-psycopg2
python38-idna
rh-python38-python-cryptography (Red Hat package)
python39-psycopg2-tests
python39-psycopg2-doc
python39-psycopg2
python39-idna
python2-jinja2
python-requests
python3-requests
python38-jinja2
python38-pycparser
python-requests (Red Hat package)
python2-requests
python39-pycparser
python38-requests
rh-python38-python-requests (Red Hat package)
python-requests-help
python39-requests
dev-python/requests
python3x-requests (Red Hat package)
mingw-python-requests
python2-chardet
python38-chardet
python39-chardet
python3x-django (Red Hat package)
python-django (Red Hat package)
python39-cryptography
python2-pytest
python2-backports-ssl_match_hostname
python2-pymongo-gridfs
python2-pymongo
python2-bson
python38-idle
python38-tkinter
python38-test
python38-rpm-macros
python38-libs
python38-devel
python38-debug
python38
rh-python38-python (Red Hat package)
python39-test
python39-tkinter
python39
python39-devel
python39-idle
python39-libs
python39-rpm-macros
python38-ply
python39-ply
python2-pyyaml
python2-rpm-macros
python2-lxml
python38-lxml
python2-coverage
python39-lxml
python38-pytest
python38-mod_wsgi
python39-mod_wsgi
python3x-rsa (Red Hat package)
python-rsa (Red Hat package)
python39-pyyaml
python38-pyyaml
python38-psutil
python39-psutil
python38-more-itertools
python2-pip
python2-pip-wheel
python2-virtualenv
python2-attrs
python38-packaging
python38-attrs
rh-python38-python-pip (Red Hat package)
python38-pip
python38-pip-wheel
python3-pip
python-pip-wheel
python-pip-help
python-pip
python39-pip-wheel
python39-pip
python-pip (Ubuntu package)
python3x-cryptography (Red Hat package)
python-cryptography (Red Hat package)
python2-setuptools
python2-setuptools-wheel
python38-setuptools
python38-setuptools-wheel
rh-python38-python-setuptools (Red Hat package)
python39-setuptools
python39-setuptools-wheel
python2-pytz
python38-pytz
IBM Integrated Analytics System
Red Hat OpenShift GitOps
watsonx.data
Splunk Add-on for Office 365
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
Dell EMC VxRail Appliance
Operational Decision Manager
IBM InfoSphere Information Server

How to mitigate CVE-2023-32681

Install updates from vendor's website.

Requests - update to 2.31.0
Node Health Check Operator - update to 0.4.1
Self Node Remediation Operator - addressed in versions 0.5.1, 0.7.1
Netezza Appliance - update to 1.0.0.1
IBM Cloud Pak for Data System - update to 1.0.9.0
IBM Concert Software - update to 2.0.0
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Containers - addressed in versions 1.7.13, 1.8.0
OpenShift Pipelines - addressed in versions 1.10.6, 1.11.2
QRadar Suite - update to 1.10.18.0
Multicluster Engine for Kubernetes - update to 2.2.7
QRadar App SDK - update to 2.2.1
Migration Toolkit for Virtualization - update to 2.4.3
OpenShift Service Mesh - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.7, 2.7.7
Guardium Data Security Center (GDSC) - update to 3.6.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.0
Red Hat Advanced Cluster Security for Kubernetes - update to 4.0.5
Splunk Add-on Builder - update to 4.1.4
IBM Cloud Pak for Data Scheduling - update to 4.7.1
Red Hat OpenShift Container Platform - addressed in versions 4.13.8, 4.13.45, 4.14.32, 4.14.33
OpenShift Virtualization - update to 4.13.3
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
IBM Qradar SIEM - update to 7.5.0 Update Pack 10
AMQ Broker - update to 7.11.1
Splunk Enterprise - addressed in versions 9.0.9, 9.1.4, 9.2.1
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.26, 23.0.1.4
IBM Observability with Instana - update to 279
python3-requests (Ubuntu package) - addressed in versions Ubuntu Pro, 2.22.0-2ubuntu1.1, 2.25.1+dfsg-2ubuntu0.1, 2.27.1+dfsg-1ubuntu2.1, 2.28.1+dfsg-1ubuntu1.1
python-requests (Ubuntu package) - update to Ubuntu Pro
python38-wcwidth - update to 0.1.7-16
python2-pluggy - update to 0.6.0-8
python2-PyMySQL - update to 0.8.0-10
python38-PyMySQL - update to 0.10.1-1
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python38-pluggy - update to 0.13.0-3
python2-docutils - update to 0.14-12
python2-markupsafe - update to 0.23-19
python2-Cython - update to 0.28.1-7
python38-Cython - update to 0.29.14-4
python2-wheel - update to 0.31.1-3
python2-wheel-wheel - update to 0.31.1-3
python38-wheel-wheel - update to 0.33.6-6
python38-wheel - update to 0.33.6-6
rh-python38-python-wheel (Red Hat package) - update to 0.33.6-9.el7
python39-wheel - update to 0.35.1-4
python39-wheel-wheel - update to 0.35.1-4
python2-scipy - update to 1.0.0-22
automation-eda-controller (Red Hat package) - addressed in versions 1.0.1-1.el8ap, 1.0.1-1.el9ap
python2-funcsigs - update to 1.0.2-13
python2-backports - update to 1.0-16
python2-ipaddress - update to 1.0.18-6
IBM Integrated Analytics System - update to 1.0.28.0
python38-markupsafe - update to 1.1.1-6
python38-asn1crypto - update to 1.2.0-3
PowerVault ME5 - update to 1.2.2.1
python38-atomicwrites - update to 1.3.0-8
python38-scipy - update to 1.3.1-5.0.2
python2-sqlalchemy - update to 1.3.2-2
python-sqlalchemy-doc - update to 1.3.2-2
python-nose-docs - update to 1.3.7-31
python2-nose - update to 1.3.7-31
ObjectScale - update to 1.4.0
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
python2-py - update to 1.5.3-6
python39-scipy - update to 1.5.4-5.0.1
python2-pysocks - update to 1.6.8-6
python38-pysocks - update to 1.7.1-4
python39-pysocks - update to 1.7.1-4
python38-py - update to 1.8.0-8
python2-pytest-mock - update to 1.9.0-4
Red Hat OpenShift GitOps - addressed in versions 1.10.0, 1.11, 1.12.5, 1.13.1
python2-six - update to 1.11.0-6
python38-six - update to 1.12.0-10
python38-cffi - update to 1.13.2-3
IBM Process Mining - update to 1.14.2
python2-numpy-doc - update to 1.14.2-16.0.1
python2-numpy - update to 1.14.2-16.0.1
python2-numpy-f2py - update to 1.14.2-16.0.1
python39-cffi - update to 1.14.3-2
python39-six - update to 1.15.0-3
python2-dns - update to 1.15.0-10
python2-setuptools_scm - update to 1.15.7-6
python38-numpy-doc - update to 1.17.3-7.0.1
python38-numpy - update to 1.17.3-7.0.1
python38-numpy-f2py - update to 1.17.3-7.0.1
python39-numpy - update to 1.19.4-3.0.1
python39-numpy-doc - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python2-urllib3 - update to 1.24.2-3
python38-urllib3 - update to 1.25.7-5
python39-urllib3 - update to 1.25.10-4
python2-mock - update to 2.0.0-13
watsonx.data - update to 2.0.3
Spectrum Discover - addressed in versions 2.0.4.8, 2.1.1
IBM MQ Operator - addressed in versions 2.0.13, 2.4.2
python2-pygments - update to 2.2.0-22
requests (Ubuntu package) - addressed in versions 2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1, 2.25.1+dfsg-2ubuntu0.3, 2.31.0+dfsg-1ubuntu1.1, 2.32.3+dfsg-1ubuntu1.1, 2.32.3+dfsg-4ubuntu1.1
python38-pyparsing - update to 2.4.5-3
python2-babel - update to 2.5.1-10
babel - update to 2.5.1-10
python2-idna - update to 2.5-7
Cloud Pak for Network Automation - update to 2.6.1
python38-babel - update to 2.7.0-11
python2-psycopg2-tests - update to 2.7.5-8
python-psycopg2-doc - update to 2.7.5-8
python2-psycopg2-debug - update to 2.7.5-8
python2-psycopg2 - update to 2.7.5-8
python2-docs - update to 2.7.16-2
python2-docs-info - update to 2.7.16-2
python2-tools - update to 2.7.18-15.0.1
python2-tkinter - update to 2.7.18-15.0.1
python2-test - update to 2.7.18-15.0.1
python2-debug - update to 2.7.18-15.0.1
python2-devel - update to 2.7.18-15.0.1
python2-libs - update to 2.7.18-15.0.1
python2 - update to 2.7.18-15.0.1
IBM Fusion HCI - update to 2.8.0
python38-cryptography - update to 2.8-3
python38-psycopg2-tests - update to 2.8.4-4
python38-psycopg2-doc - update to 2.8.4-4
python38-psycopg2 - update to 2.8.4-4
python38-idna - update to 2.8-6
rh-python38-python-cryptography (Red Hat package) - update to 2.8-6.el7
python39-psycopg2-tests - update to 2.8.6-2.0.1
python39-psycopg2-doc - update to 2.8.6-2.0.1
python39-psycopg2 - update to 2.8.6-2.0.1
python39-idna - update to 2.10-3
python2-jinja2 - update to 2.10-9
python-requests - addressed in versions 2.11.1-6.34.1, 2.24.0-8.14.1
python3-requests - addressed in versions 2.11.1-6.34.1, 2.24.0-8.14.1, 2.24.0-8.17.1, 2.24.0-150300.3.3.1, 2.25.1-150100.6.16.1
python38-jinja2 - update to 2.11.3-1
python38-pycparser - update to 2.19-3
python3-requests - update to 2.20.0-2.2
python-requests (Red Hat package) - addressed in versions 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2, 2.31.0-1.el9ap
python2-requests - update to 2.20.0-4
python39-pycparser - update to 2.20-3
python38-requests - update to 2.22.0-10
rh-python38-python-requests (Red Hat package) - update to 2.22.0-11.el7
python2-requests - update to 2.24.0-2
python-requests-help - update to 2.24.0-2
python3-requests - update to 2.24.0-2
python-requests - update to 2.24.0-2
python2-requests - addressed in versions 2.24.0-150300.3.3.1, 2.25.1-150100.6.16.1
python39-requests - update to 2.25.0-3
python-requests - update to 2.25.1-1
python-requests - addressed in versions 2.28.1-3.fc37, 2.28.2-2.fc38
dev-python/requests - update to 2.31.0
python3x-requests (Red Hat package) - update to 2.31.0-1.el8ap
mingw-python-requests - update to 2.31.0-1.fc38
python2-chardet - update to 3.0.4-10
python38-chardet - update to 3.0.4-19
python39-chardet - update to 3.0.4-19
VMware Tanzu Operations Manager - update to 3.0.11
PowerStoreX OS - update to 3.2.1.5-2424458
python3x-django (Red Hat package) - update to 3.2.20-1.el8ap
python-django (Red Hat package) - update to 3.2.20-1.el9ap
python39-cryptography - update to 3.3.1-2
APEX Cloud Platform for Red Hat OpenShift - update to 03.04.01.00
python2-pytest - update to 3.4.2-13
python2-backports-ssl_match_hostname - update to 3.5.0.1-12
PowerStore T - addressed in versions 3.6.1.2-2315284, 3.6.1.4-2413340
IBM Cloud Transformation Advisor - update to 3.7.0
Cinder Plug-in - update to 3.7
QRadar Assistant - update to 3.7.0
python2-pymongo-gridfs - update to 3.7.0-1.0.1
python2-pymongo - update to 3.7.0-1.0.1
python2-bson - update to 3.7.0-1.0.1
python38-idle - update to 3.8.17-2.0.1
python38-tkinter - update to 3.8.17-2.0.1
python38-test - update to 3.8.17-2.0.1
python38-rpm-macros - update to 3.8.17-2.0.1
python38-libs - update to 3.8.17-2.0.1
python38-devel - update to 3.8.17-2.0.1
python38-debug - update to 3.8.17-2.0.1
python38 - update to 3.8.17-2.0.1
rh-python38-python (Red Hat package) - update to 3.8.18-2.el7
python39-test - update to 3.9.18-2.0.1
python39-tkinter - update to 3.9.18-2.0.1
python39 - update to 3.9.18-2.0.1
python39-devel - update to 3.9.18-2.0.1
python39-idle - update to 3.9.18-2.0.1
python39-libs - update to 3.9.18-2.0.1
python39-rpm-macros - update to 3.9.18-2.0.1
python38-ply - update to 3.11-10
python39-ply - update to 3.11-10
python2-pyyaml - update to 3.12-16
python2-rpm-macros - update to 3-38
Dell EMC PowerStore Family Operating System - update to 4.0.0.0-2284811
python2-lxml - update to 4.2.3-6
IBM Cloud Pak for Watson AIOps - update to 4.4.0
python38-lxml - update to 4.4.1-7
python2-coverage - update to 4.5.1-5
Splunk Add-on for Office 365 - update to 4.5.2
python39-lxml - update to 4.6.5-1
python38-pytest - update to 4.6.6-3
python38-mod_wsgi - update to 4.6.8-5
IBM Watson Knowledge Catalog in Cloud Pak for Data - update to 4.7
python39-mod_wsgi - update to 4.7.1-7
IBM Decision Optimization for Cloud Pak for Data - update to 4.7.2
python3x-rsa (Red Hat package) - update to 4.7.2-1.el8ap
python-rsa (Red Hat package) - update to 4.7.2-1.el9ap
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.7.3
Cognos Dashboards on Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
Dell EMC Storage Monitoring and Reporting (SMR) - addressed in versions 4.10.0.0, 5.0.2.2
EMC ViPR SRM - update to 4.10.0.0
Storage Resource Manager - update to 5.0.2.2
SOAR QRadar Plugin App - update to 5.0.3
App Connect Enterprise Certified Container - addressed in versions 5.0.8, 8.2.0
python39-pyyaml - update to 5.4.1-1
python38-pyyaml - update to 5.4.1-1
python38-psutil - update to 5.6.4-4
python39-psutil - update to 5.8.0-4.0.1
Storage Ceph - update to 6.1z3
IBM Sterling Connect:Direct Web Services - update to 6.3.0.11 ifix001
Red Hat Satellite - update to 6.14
python38-more-itertools - update to 7.2.0-5
IBM QRadar Incident Forensics - update to 7.5.0.10
Dell EMC VxRail Appliance - update to 8.0.120
Maximo Application Suite - IoT Component - addressed in versions 8.7.21, 8.8.17, 9.0.7
IBM Maximo Application Suite - addressed in versions 8.9.6, 8.10.4
Operational Decision Manager - addressed in versions 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8
python2-pip - update to 9.0.3-19.0.1
python2-pip-wheel - update to 9.0.3-19.0.1
IBM supplied MQ Advanced container images - update to 9.3.0.10-r1
Security Verify Governance - Identity Manager virtual appliance - update to 10.0.2.0.4
IBM Workload Scheduler - addressed in versions 10.1.0.4, 10.2.1
IBM Spectrum Protect Plus - update to 10.1.15.2
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 1
python2-virtualenv - update to 15.1.0-22
python2-attrs - update to 17.4.0-10
python38-packaging - update to 19.2-3
python38-attrs - update to 19.3.0-3
rh-python38-python-pip (Red Hat package) - update to 19.3.1-4.el7
python38-pip - update to 19.3.1-7
python38-pip-wheel - update to 19.3.1-7
python3-pip - addressed in versions 20.2.2-12, 21.3.1-11
python2-pip - update to 20.2.2-12
python-pip-wheel - addressed in versions 20.2.2-12, 21.3.1-11
python-pip-help - addressed in versions 20.2.2-12, 21.3.1-11
python-pip - addressed in versions 20.2.2-12, 21.3.1-11
python39-pip-wheel - update to 20.2.4-8
python39-pip - update to 20.2.4-8
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.8, 23.0.10
IBM Robotic Process Automation - addressed in versions 21.0.7.8, 23.0.10
python-pip (Ubuntu package) - addressed in versions 22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.3, 25.0+dfsg-1ubuntu0.2
IBM Automation Decision Services - update to 23.0.1 IF006
Junos cRPD - update to 23.4R1
Juniper Cloud Native Router - update to 23.4R1
python3x-cryptography (Red Hat package) - update to 38.0.4-2.el8ap
python-cryptography (Red Hat package) - update to 38.0.4-2.el9ap
python2-setuptools - update to 39.0.1-13
python2-setuptools-wheel - update to 39.0.1-13
python38-setuptools - update to 41.6.0-5
python38-setuptools-wheel - update to 41.6.0-5
rh-python38-python-setuptools (Red Hat package) - update to 41.6.0-8.el7
python39-setuptools - update to 50.3.2-5
python39-setuptools-wheel - update to 50.3.2-5
python2-pytz - update to 2017.2-13
python38-pytz - update to 2019.3-4

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins