CVE-2023-42503 - Versionsgeschichte

Odelice am 10. Oktober 2023 um 08:13 Uhr

2023-10-10T08:13:15Z

Sbaumbach: /* Affected Applications */

2023-09-27T08:44:53Z

Affected Applications

Sbaumbach: /* Affected Applications */

2023-09-27T08:42:28Z

Affected Applications

Sbaumbach: -> Englisch

2023-09-27T08:41:54Z

-> Englisch

Odelice am 27. September 2023 um 06:56 Uhr

2023-09-27T06:56:29Z

Odelice am 26. September 2023 um 12:07 Uhr

2023-09-26T12:07:19Z

Sbaumbach: /* Betroffene Applikationen */

2023-09-26T11:34:58Z

Betroffene Applikationen

Sbaumbach: /* Betroffene Applikationen */

2023-09-21T14:32:33Z

Betroffene Applikationen

Sbaumbach: /* Betroffene Applikationen */

2023-09-19T07:40:40Z

Betroffene Applikationen

Odelice am 18. September 2023 um 14:51 Uhr

2023-09-18T14:51:31Z

@@ Zeile 19: / Zeile 19: @@
 | CarrierAPI || not affected || not affected
 |-
-| ComManager ||  ||
+| ComManager || 1.2.12
 |-
 | DataGatewayServer V3 (DGS V3)<br>''all versions 2.x.x are excluded''|| 3.8.14 or higher

@@ Zeile 11: / Zeile 11: @@
 ''fixed version = Minimum version where the security vulnerability is fixed or not affected anymore.''<br>
 ''not affected = This application is not affected and therefore there is no need for action.<br>
-all versions = Every single version is affected. A need for action is required regardless of the version''
+''all versions = Every single version is affected. A need for action is required regardless of the version''
 {| class="wikitable"

@@ Zeile 13: / Zeile 13: @@
 all versions = Every single version is affected. A need for action is required regardless of the version''
 {| class="wikitable"
 |-

@@ Zeile 1: / Zeile 1: @@
-= Quelle =
+= Source =
 https://nvd.nist.gov/vuln/detail/CVE-2023-42503
-= Beschreibung vom CVE =
+= Description of this CVE =
-Durch die Ausnutzung der Sicherheitslücke wäre eine DOS (Denial of Service) Attacke auf das System möglich.
+Through exploiting this security vulnerability a DOS (Denial of Service) attack may be possible on the system.
-Das Ausnutzen der Sicherheitslücke geht nur über das Lesen einer .tar Datei. Keine unserer Applikationen nutzt momentan diese Funktion.
+Exploiting this weakness only works if a .tar file is read. Currently none of our applications uses this functionality.
-= Betroffene Applikationen =
+= Affected Applications =
-''application name = Name der Applikation.''<br>
+''affected version = From which version onwards there is a need for action.''<br>
-''affected version = Für welche Versionssände Handlungsbedarf besteht.''<br>
+''fixed version = Minimum version where the security vulnerability is fixed or not affected anymore.''<br>
-''fixed version = Mindestversionsstand, in welcher die Sicherheitslücke behoben / nicht betroffen ist.''<br><br>
+''not affected = This application is not affected and therefore there is no need for action.<br>
-''not affected = Diese Applikation ist von der Sicherheitslücke nicht betroffen. Es besteht kein Handlungsbedarf.''<br><br>
+all versions = Every single version is affected. A need for action is required regardless of the version''
 {| class="wikitable"
 |-
-! application name !! affected version !! fixed version
+! Application Name !! Affected Version !! Fixed Version
 |-
 | CarrierAPI || not affected || not affected
@@ Zeile 20: / Zeile 22: @@
 | ComManager ||  ||
 |-
-| DataGatewayServer V3 (DGS V3)<br>''alle Versionen 2.x.x sind ausgeschlossen'' || 3.8.14 or higher
+| DataGatewayServer V3 (DGS V3)<br>''all versions 2.x.x are excluded''|| 3.8.14 or higher
 | 3.8.27
 |-
@@ Zeile 31: / Zeile 33: @@
 | HFMS (Tarifwerk) || 1.8.9 or higher || 1.9.0
 |-
 | HVS32AMAService || 1.3.6 or higher
 | 1.3.8
 |-
 | HVS32DBArchivierung || all versions || 4.6.8
 |-
 | HVS32MonitoringService || 1.4.11 or higher
 | 1.4.13
 |-
 | HVS32MonitoringServiceLight || 1.5.8 or higher
 | 1.5.10
 |-

@@ Zeile 31: / Zeile 31: @@
 | HFMS (Tarifwerk) || 1.8.9 or higher || 1.9.0
 |-
-| HVS32AMAService ||  ||
+| HVS32AMAService || 1.3.6 or higher
 |-
 | HVS32DBArchivierung || all versions || 4.6.8
 |-
-| HVS32MonitoringService ||  ||
+| HVS32MonitoringService || 1.4.11 or higher
 |-
-| HVS32MonitoringServiceLight ||  ||
+| HVS32MonitoringServiceLight || 1.5.8 or higher
 |-
 | IRIS || all versions || 1.1.2

@@ Zeile 20: / Zeile 20: @@
 | ComManager ||  ||
 |-
-| DataGatewayServer V3 (DGS V3)<br>''alle Versionen 2.x.x sind ausgeschlossen'' || 3.8.14 || 3.8.27
+| DataGatewayServer V3 (DGS V3)<br>''alle Versionen 2.x.x sind ausgeschlossen'' || 3.8.14 or higher
 |-
 | FileConverter ||  ||
@@ Zeile 28: / Zeile 29: @@
 | GLSBoxService ||  ||
 |-
-| HFMS (Tarifwerk) || >= 1.8.9 || 1.9.0
+| HFMS (Tarifwerk) || 1.8.9 or higher || 1.9.0
 |-
 | HVS32AMAService ||  ||

@@ Zeile 38: / Zeile 38: @@
 | HVS32MonitoringServiceLight ||  ||
 |-
-| IRIS || all versions || -
+| IRIS || all versions || 1.1.2
 |-
 | Leitcode ||  ||

@@ Zeile 44: / Zeile 44: @@
 | ScaleService || all versions || 2.2.6
 |-
-| SEM-Manager || all versions || -
+| SEM-Manager || all versions || 1.6.3
 |-
-| SEM-Web || all versions || -
+| SEM-Web || all versions || 1.6.1
 |-
 | Verladefreigabe || all versions || 2.2.5