Information disclosure in urllib3 - CVE-2023-43804

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU81322

Information disclosure in urllib3 - CVE-2023-43804

Published: October 2, 2023 / Updated: April 19, 2024


Vulnerability identifier: #VU81322
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-43804
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to urllib does not strip the "Cookie" HTTP header during cross-origin HTTP redirects. A remote attacker can gain unauthorized access to sensitive information.


Affected software

urllib3
Amazon Linux AMI
IBM AIX
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Public Cloud Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Workstation Extension 12
Basesystem Module
Ubuntu
openEuler
Fedora
IBM VIOS
IBM Concert Software
Migration Toolkit for Runtimes
Service Telemetry Framework
IBM Cloud Pak for Security
IBM Cloud Pak for Data System
Cryostat
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
Splunk User Behavior Analytics (UBA)
IBM Maximo Application Suite
IBM Observability with Instana
Multicluster GlobalHub
IBM Process Mining
IBM MQ Operator
IBM Spectrum Conductor
IBM Fusion HCI
IBM Cloud Object Storage Systems
Splunk Add-on for Google Cloud Platform
IBM Watson Assistant for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Sterling Connect:Direct Web Services
IBM Spectrum Symphony
IBM Maximo Application Suite - Manage Component
IBM Workload Scheduler
Dell NetWorker Virtual Edition
IBM Business Automation Workflow
IBM Robotic Process Automation
Juniper Cloud Native Router
IBM Cloud Pak for Business Automation
Migration Toolkit for Containers
QRadar Suite
Juniper Secure Analytics (JSA)
Splunk Enterprise
QRadar App SDK
Dell EMC PowerProtect Data Protection
DB2 Data Management Console
Guardium Data Security Center (GDSC)
DB2 Data Management Console on CPD
Oracle Business Intelligence Enterprise Edition
SmartFabric OS10
Storage Sentinel Anomaly Scan Engine
IBM Application Suite - IBM Asset Data Dictionary Component
ObjectScale
Cloud Pak for Network Automation
QRadar Deployment Intelligence App
OpenManage Network Integration (OMNI)
EMC ECS
Platform Automation Toolkit
SOAR QRadar Plugin App
Storage Ceph
IBM QRadar Incident Forensics
Maximo Application Suite - IoT Component
Maximo Application Suite - Predict Component
Storage Protect Plus Container Agent
IBM Netezza for Cloud Pak for Data
NetWorker Management Console (NMC)
Robotic Process Automation for Cloud Pak
Intel In-Band Manageability
Juniper Junos Space
Python for Scientific Computing
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3-pip (Ubuntu package)
python3-urllib3 (Ubuntu package)
python-urllib3 (Ubuntu package)
python-pip-whl (Ubuntu package)
python-pip (Ubuntu package)
python39-wcwidth
python2-pluggy
python2-PyMySQL
python39-PyMySQL
python39-toml
python39-pluggy
python2-docutils
python2-markupsafe
python2-Cython
python39-Cython
python2-wheel
python2-wheel-wheel
python39-wheel-wheel
python39-wheel
python2-scipy
python2-funcsigs
python2-backports
python2-ipaddress
python39-iniconfig
python-sqlalchemy-doc
python2-sqlalchemy
python-nose-docs
python2-nose
python2-py
python39-scipy
python2-pysocks
python39-pysocks
python2-pytest-mock
python39-py
python2-six
python2-numpy
python2-numpy-f2py
python2-numpy-doc
python39-cffi
python39-six
python2-dns
python2-setuptools_scm
python39-numpy-doc
python39-numpy-f2py
python39-numpy
python-urllib3
python2-urllib3
python-urllib3 (Red Hat package)
python3-urllib3
python39-urllib3
python3.11-urllib3 (Red Hat package)
python3-urllib3-doc
python3x-urllib3 (Red Hat package)
python2-mock
python2-pygments
ansible-automation-platform-installer (Red Hat package)
python39-pyparsing
babel
python2-babel
python2-idna
python39-pybind11-devel
python39-pybind11
python2-psycopg2-tests
python2-psycopg2-debug
python2-psycopg2
python-psycopg2-doc
python2-docs-info
python2-docs
python2
python2-libs
python2-devel
python2-debug
python2-test
python2-tkinter
python2-tools
python39-psycopg2-tests
python39-psycopg2
python39-psycopg2-doc
python39-idna
python2-jinja2
ansible-core (Red Hat package)
python2-requests
python39-pycparser
python39-requests
python2-chardet
python39-chardet
python39-cryptography
python2-pytest
python2-backports-ssl_match_hostname
python2-pymongo-gridfs
python2-bson
python2-pymongo
python39-rpm-macros
python39-test
python39-tkinter
python39-libs
python39-idle
python39-devel
python39-debug
python39
python39-ply
python2-pyyaml
python2-rpm-macros
fence-agents (Red Hat package)
python2-lxml
automation-controller (Red Hat package)
python2-coverage
python39-lxml
python39-mod_wsgi
fence-agents-heuristics-ping
fence-agents-eps
fence-agents-ibmblade
fence-agents-emerson
fence-agents-eaton-snmp
fence-agents-drac5
fence-agents-common
fence-agents-cisco-ucs
fence-agents-hpblade
fence-agents-ibm-powervs
fence-agents-ibm-vpc
fence-agents-apc-snmp
fence-agents-ifmib
fence-agents-ilo-moonshot
fence-agents-ilo-mp
fence-agents-ilo-ssh
fence-agents-ilo2
fence-agents-intelmodular
fence-agents-ipdu
fence-agents-ipmilan
fence-agents-lpar
fence-agents-mpath
fence-virtd-cpg
fence-agents-kubevirt
fence-agents-kdump
fence-agents-all
fence-agents-aliyun
fence-agents-aws
fence-agents-azure-arm
fence-agents-gce
fence-agents-rhevm
fence-agents-rsa
fence-agents-rsb
fence-agents-sbd
fence-virt
fence-agents-scsi
fence-virtd
fence-agents-cisco-mds
fence-virtd-libvirt
fence-agents-virsh
fence-virtd-multicast
fence-agents-vmware-rest
fence-virtd-serial
fence-virtd-tcp
ha-cloud-support
fence-agents-vmware-soap
fence-agents-wti
fence-agents-amt-ws
fence-agents-apc
fence-agents-redfish
fence-agents-bladecenter
fence-agents-brocade
python39-pyyaml
python39-psutil
python39-pytest
python39-more-itertools
python2-pip-wheel
python2-pip
python2-virtualenv
python2-attrs
python-pip
python-pip-help
python-pip-wheel
python3-pip
python39-pip
python39-pip-wheel
python39-attrs
python39-packaging
python3-pip-whl (Ubuntu package)
python2-setuptools
python2-setuptools-wheel
python39-setuptools
python39-setuptools-wheel
python2-pytz
IBM API Connect
IBM InfoSphere Information Server
IBM Integrated Analytics System
Red Hat OpenShift GitOps
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM Spectrum Scale
Dell EMC VxRail Appliance
Junos cRPD

How to mitigate CVE-2023-43804

Install updates from vendor's website.

urllib3 - addressed in versions 1.26.17, 2.0.6
IBM Concert Software - update to 1.0.5
Migration Toolkit for Runtimes - update to 1.2.5
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Containers - addressed in versions 1.7.15, 1.8.3
IBM Cloud Pak for Security - update to 1.11.3.0
QRadar Suite - update to 1.11.3.0
IBM Cloud Pak for Data System - update to 2.0.2.1.IF2
QRadar App SDK - update to 2.2.1
Intel In-Band Manageability - update to 4.1.4
Dell EMC PowerProtect Data Protection - update to 2.7.8
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.5, 2.9.3
DB2 Data Management Console - update to 3.1.13.1
Guardium Data Security Center (GDSC) - update to 3.6.1
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 4.1.6, 4.2.4
Python for Scientific Computing - update to 4.2.1
DB2 Data Management Console on CPD - update to 5.1.2
Splunk User Behavior Analytics (UBA) - update to 5.4.2
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Juniper Secure Analytics (JSA) - addressed in versions 7.5.0 UP7 IF04, 7.5.0 UP8 IF03, 7.5.0 UP9 IF02
IBM Qradar SIEM - addressed in versions 7.5.0 Update Pack 8 IF01, 7.5.0 Update Pack 10
IBM Maximo Application Suite - addressed in versions 8.10.6, 8.11.1
Splunk Enterprise - addressed in versions 9.0.9, 9.1.4, 9.1.6, 9.2.1, 9.2.3, 9.3.1
IBM API Connect - update to 10.0.8.5
SmartFabric OS10 - addressed in versions 10.5.4.11, 10.5.6.1
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 2
IBM Observability with Instana - addressed in versions 274, 279
python3-pip (Ubuntu package) - addressed in versions Ubuntu Pro, 20.0.2-5ubuntu1.10, 22.0.2+dfsg-1ubuntu0.4, 23.0.1+dfsg-1ubuntu0.2, 23.2+dfsg-1ubuntu0.1
python3-urllib3 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.25.8-2ubuntu0.3, 1.26.5-1~exp1ubuntu0.1, 1.26.12-1ubuntu0.1, 1.26.16-1ubuntu0.1
python-urllib3 (Ubuntu package) - update to Ubuntu Pro
python-pip-whl (Ubuntu package) - addressed in versions Ubuntu Pro, 20.0.2-5ubuntu1.10
python-pip (Ubuntu package) - update to Ubuntu Pro
python39-wcwidth - update to 0.2.5-3
python2-pluggy - update to 0.6.0-8
python2-PyMySQL - update to 0.8.0-10
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python39-pluggy - update to 0.13.1-3
python2-docutils - update to 0.14-12
python2-markupsafe - update to 0.23-19
python2-Cython - update to 0.28.1-7
python39-Cython - update to 0.29.21-5
python2-wheel - update to 0.31.1-3
python2-wheel-wheel - update to 0.31.1-3
python39-wheel-wheel - update to 0.35.1-4
python39-wheel - update to 0.35.1-4
python2-scipy - update to 1.0.0-22
Multicluster GlobalHub - update to 1.0.2
python2-funcsigs - update to 1.0.2-13
python2-backports - update to 1.0-16
python2-ipaddress - update to 1.0.18-6
IBM Integrated Analytics System - update to 1.0.30.0
python39-iniconfig - update to 1.1.1-2
Storage Sentinel Anomaly Scan Engine - update to 1.1.6
IBM Application Suite - IBM Asset Data Dictionary Component - update to 1.1.6
python-sqlalchemy-doc - update to 1.3.2-2
python2-sqlalchemy - update to 1.3.2-2
python-nose-docs - update to 1.3.7-31
python2-nose - update to 1.3.7-31
ObjectScale - update to 1.4.0
python2-py - update to 1.5.3-6
python39-scipy - update to 1.5.4-5.0.1
python2-pysocks - update to 1.6.8-6
python39-pysocks - update to 1.7.1-4
python2-pytest-mock - update to 1.9.0-4
Red Hat OpenShift GitOps - addressed in versions 1.10.0, 1.11
python39-py - update to 1.10.0-1
python2-six - update to 1.11.0-6
python2-numpy - update to 1.14.2-16.0.1
python2-numpy-f2py - update to 1.14.2-16.0.1
python2-numpy-doc - update to 1.14.2-16.0.1
IBM Process Mining - update to 1.14.3
python39-cffi - update to 1.14.3-2
python39-six - update to 1.15.0-3
python2-dns - update to 1.15.0-10
python2-setuptools_scm - update to 1.15.7-6
python39-numpy-doc - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python39-numpy - update to 1.19.4-3.0.1
python-urllib3 - addressed in versions 1.23-3.25.1, 1.25.10-3.34.1, 1.25.10-5.22.1
python2-urllib3 - update to 1.24.2-4
python-urllib3 (Red Hat package) - addressed in versions 1.24.2-5.el8_6.1, 1.24.2-5.el8_8.1, 1.25.10-5.el8ost, 1.26.18-1.el9ap
python3-urllib3 - addressed in versions 1.24.2-7, 1.26.18-1
python-urllib3 - update to 1.25.9-8
python3-urllib3 - update to 1.25.9-8
python2-urllib3 - update to 1.25.9-8
python3-urllib3 - addressed in versions 1.25.10-3.34.1, 1.25.10-150300.4.6.1
python39-urllib3 - update to 1.25.10-5
python-urllib3 - update to 1.25.10-5
python3.11-urllib3 (Red Hat package) - addressed in versions 1.26.12-2.el8, 1.26.12-2.el9
python-urllib3 - addressed in versions 1.26.17-1.fc37, 1.26.17-1.fc38, 1.26.17-1.fc39
python3-urllib3-doc - update to 1.26.18-1
python3x-urllib3 (Red Hat package) - update to 1.26.18-1.el8ap
python2-mock - update to 2.0.0-13
IBM MQ Operator - addressed in versions 2.0.17, 3.0.0
python2-pygments - update to 2.2.0-22
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.4-5.el8ap, 2.4-5.el9ap
python39-pyparsing - update to 2.4.7-5
IBM Spectrum Conductor - update to 2.5.1 Fix 601861
babel - update to 2.5.1-10
python2-babel - update to 2.5.1-10
python2-idna - update to 2.5-7
Cloud Pak for Network Automation - update to 2.6.5
python39-pybind11-devel - update to 2.7.1-1
python39-pybind11 - update to 2.7.1-1
python2-psycopg2-tests - update to 2.7.5-8
python2-psycopg2-debug - update to 2.7.5-8
python2-psycopg2 - update to 2.7.5-8
python-psycopg2-doc - update to 2.7.5-8
python2-docs-info - update to 2.7.16-2
python2-docs - update to 2.7.16-2
python2 - update to 2.7.18-17.0.1
python2-libs - update to 2.7.18-17.0.1
python2-devel - update to 2.7.18-17.0.1
python2-debug - update to 2.7.18-17.0.1
python2-test - update to 2.7.18-17.0.1
python2-tkinter - update to 2.7.18-17.0.1
python2-tools - update to 2.7.18-17.0.1
IBM Fusion HCI - update to 2.8.0
python39-psycopg2-tests - update to 2.8.6-3.0.1
python39-psycopg2 - update to 2.8.6-3.0.1
python39-psycopg2-doc - update to 2.8.6-3.0.1
python39-idna - update to 2.10-4
python2-jinja2 - update to 2.10-10
ansible-core (Red Hat package) - addressed in versions 2.15.9-1.el8ap, 2.15.9-1.el9ap
python2-requests - update to 2.20.0-4
python39-pycparser - update to 2.20-3
python39-requests - update to 2.25.0-3
python2-chardet - update to 3.0.4-10
python39-chardet - update to 3.0.4-19
QRadar Deployment Intelligence App - update to 3.0.16
python39-cryptography - update to 3.3.1-3
python2-pytest - update to 3.4.2-13
python2-backports-ssl_match_hostname - update to 3.5.0.1-12
OpenManage Network Integration (OMNI) - update to 3.7
python2-pymongo-gridfs - update to 3.7.0-1.0.1
python2-bson - update to 3.7.0-1.0.1
python2-pymongo - update to 3.7.0-1.0.1
EMC ECS - update to 3.8.0.5
python39-rpm-macros - update to 3.9.19-2.0.1
python39-test - update to 3.9.19-2.0.1
python39-tkinter - update to 3.9.19-2.0.1
python39-libs - update to 3.9.19-2.0.1
python39-idle - update to 3.9.19-2.0.1
python39-devel - update to 3.9.19-2.0.1
python39-debug - update to 3.9.19-2.0.1
python39 - update to 3.9.19-2.0.1
python39-ply - update to 3.11-10
python2-pyyaml - update to 3.12-16
IBM Cloud Object Storage Systems - update to 3.17.5.100
python2-rpm-macros - update to 3-38
fence-agents (Red Hat package) - addressed in versions 4.2.1-30.el8_1.10, 4.2.1-65.el8_4.13, 4.2.1-112.el8_8.2, 4.2.1-121.el8_9.2, 4.10.0-43.el9_2.2, 4.10.0-55.el9_3.2
python2-lxml - update to 4.2.3-6
Splunk Add-on for Google Cloud Platform - update to 4.3.0
automation-controller (Red Hat package) - addressed in versions 4.4.7-1.el8ap, 4.4.7-1.el9ap, 4.5.1-1.el8ap, 4.5.1-1.el9ap
Platform Automation Toolkit - addressed in versions 4.4.19, 5.0.13
python2-coverage - update to 4.5.1-5
python39-lxml - update to 4.6.5-1
python39-mod_wsgi - update to 4.7.1-7
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.8.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.8.3
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.3
IBM Watson Knowledge Catalog in Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
fence-agents-heuristics-ping - update to 4.10.0-62.0.1
fence-agents-eps - update to 4.10.0-62.0.1
fence-agents-ibmblade - update to 4.10.0-62.0.1
fence-agents-emerson - update to 4.10.0-62.0.1
fence-agents-eaton-snmp - update to 4.10.0-62.0.1
fence-agents-drac5 - update to 4.10.0-62.0.1
fence-agents-common - update to 4.10.0-62.0.1
fence-agents-cisco-ucs - update to 4.10.0-62.0.1
fence-agents-hpblade - update to 4.10.0-62.0.1
fence-agents-ibm-powervs - update to 4.10.0-62.0.1
fence-agents-ibm-vpc - update to 4.10.0-62.0.1
fence-agents-apc-snmp - update to 4.10.0-62.0.1
fence-agents-ifmib - update to 4.10.0-62.0.1
fence-agents-ilo-moonshot - update to 4.10.0-62.0.1
fence-agents-ilo-mp - update to 4.10.0-62.0.1
fence-agents-ilo-ssh - update to 4.10.0-62.0.1
fence-agents-ilo2 - update to 4.10.0-62.0.1
fence-agents-intelmodular - update to 4.10.0-62.0.1
fence-agents-ipdu - update to 4.10.0-62.0.1
fence-agents-ipmilan - update to 4.10.0-62.0.1
fence-agents-lpar - update to 4.10.0-62.0.1
fence-agents-mpath - update to 4.10.0-62.0.1
fence-virtd-cpg - update to 4.10.0-62.0.1
fence-agents-kubevirt - update to 4.10.0-62.0.1
fence-agents-kdump - update to 4.10.0-62.0.1
fence-agents-all - update to 4.10.0-62.0.1
fence-agents-aliyun - update to 4.10.0-62.0.1
fence-agents-aws - update to 4.10.0-62.0.1
fence-agents-azure-arm - update to 4.10.0-62.0.1
fence-agents-gce - update to 4.10.0-62.0.1
fence-agents-rhevm - update to 4.10.0-62.0.1
fence-agents-rsa - update to 4.10.0-62.0.1
fence-agents-rsb - update to 4.10.0-62.0.1
fence-agents-sbd - update to 4.10.0-62.0.1
fence-virt - update to 4.10.0-62.0.1
fence-agents-scsi - update to 4.10.0-62.0.1
fence-virtd - update to 4.10.0-62.0.1
fence-agents-cisco-mds - update to 4.10.0-62.0.1
fence-virtd-libvirt - update to 4.10.0-62.0.1
fence-agents-virsh - update to 4.10.0-62.0.1
fence-virtd-multicast - update to 4.10.0-62.0.1
fence-agents-vmware-rest - update to 4.10.0-62.0.1
fence-virtd-serial - update to 4.10.0-62.0.1
fence-virtd-tcp - update to 4.10.0-62.0.1
ha-cloud-support - update to 4.10.0-62.0.1
fence-agents-vmware-soap - update to 4.10.0-62.0.1
fence-agents-wti - update to 4.10.0-62.0.1
fence-agents-amt-ws - update to 4.10.0-62.0.1
fence-agents-apc - update to 4.10.0-62.0.1
fence-agents-redfish - update to 4.10.0-62.0.1
fence-agents-bladecenter - update to 4.10.0-62.0.1
fence-agents-brocade - update to 4.10.0-62.0.1
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.15.0
IBM Spectrum Scale - addressed in versions 5.1.2.15, 5.1.9.1
SOAR QRadar Plugin App - update to 5.3.1
python39-pyyaml - update to 5.4.1-1
python39-psutil - update to 5.8.0-4.0.1
python39-pytest - update to 6.0.2-2.0.1
IBM Sterling Connect:Direct Web Services - update to 6.3.0.11 ifix001
Storage Ceph - addressed in versions 7.0, 7.1
IBM Spectrum Symphony - update to 7.3.2 Fix 601860
IBM QRadar Incident Forensics - update to 7.5.0.10
python39-more-itertools - update to 8.5.0-2
IBM Maximo Application Suite - Manage Component - addressed in versions 8.6.17, 8.7.11, 9.0.2
Maximo Application Suite - IoT Component - addressed in versions 8.7.21, 8.8.17, 9.0.7
Maximo Application Suite - Predict Component - update to 8.9.1
Dell EMC VxRail Appliance - update to 8.320
python2-pip-wheel - update to 9.0.3-19.0.1
python2-pip - update to 9.0.3-19.0.1
IBM Workload Scheduler - addressed in versions 10.1.0.5, 10.2.3
Storage Protect Plus Container Agent - update to 10.1.12.7
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
python2-virtualenv - update to 15.1.0-22
python2-attrs - update to 17.4.0-10
Dell NetWorker Virtual Edition - update to 19.11
NetWorker Management Console (NMC) - update to 19.11
python-pip - addressed in versions 20.2.2-9, 21.3.1-6, 21.3.1-8
python-pip-help - addressed in versions 20.2.2-9, 21.3.1-6, 21.3.1-8
python-pip-wheel - addressed in versions 20.2.2-9, 21.3.1-6, 21.3.1-8
python2-pip - update to 20.2.2-9
python3-pip - addressed in versions 20.2.2-9, 21.3.1-6, 21.3.1-8
python39-pip - update to 20.2.4-9
python39-pip-wheel - update to 20.2.4-9
python39-attrs - update to 20.3.0-2
python39-packaging - update to 20.4-4
python3-pip-whl (Ubuntu package) - addressed in versions 22.0.2+dfsg-1ubuntu0.4, 23.0.1+dfsg-1ubuntu0.2, 23.2+dfsg-1ubuntu0.1
IBM Business Automation Workflow - update to 23.0.2 IF001
Robotic Process Automation for Cloud Pak - update to 23.0.18
IBM Robotic Process Automation - update to 23.0.18
Juniper Cloud Native Router - update to 23.4R1
Junos cRPD - update to 23.4R1
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF004, 24.0.1-IF001
Juniper Junos Space - update to 26.1R1 Patch V1
python2-setuptools - update to 39.0.1-14
python2-setuptools-wheel - update to 39.0.1-14
python39-setuptools - update to 50.3.2-5
python39-setuptools-wheel - update to 50.3.2-5
python2-pytz - update to 2017.2-13

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins