CVE-2024-41763
published 2025-01-04CVE-2024-41763: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.20%
9.8th percentile
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | engineering_lifecycle_optimization_publishing | — | — |
| ibm | engineering_lifecycle_optimization_publishing | — | — |
| ibm | engineering_lifecycle_optimization_publishing | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Possible Skype for Business SSRF Attempt (CVE-2023-41763)
suricata·2023-10-11·CVSS 5.3
CVE-2023-41763 [MEDIUM] ET WEB_SPECIFIC_APPS Possible Skype for Business SSRF Attempt (CVE-2023-41763)
ET WEB_SPECIFIC_APPS Possible Skype for Business SSRF Attempt (CVE-2023-41763)
Rule: alert http $HTTP_SERVERS any -> any any (msg:"ET WEB_SPECIFIC_APPS Possible Skype for Business SSRF Attempt (CVE-2023-41763)"; flow:established,to_server; http.method; content:"GET"; http.accept; content:"Application/vnd.microsoft.lync.meeting+xml"; http.user_agent; content:"LCS-Server"; fast_pattern; reference:url,frycos.github.io/vulns4free/2022/09/26/skype-audit-part2.html; reference:cve,2023-41763; classtype:web-application-attack; sid:2048538; rev:2; metadata:affected_product Skype_For_Business, attack_target Web_Server, created_at 2023_10_11, cve CVE_2023_41763, deployment Internal, deployment SSLDecrypt, performance_impact Low, confidence Low, signature_severity Minor, tag CISA_KEV, updated_at 2024
No public exploits indexed.
No writeups or analysis indexed.
2025-01-04
Published