imported>Rvogel1 No edit summary |
imported>Rvogel1 No edit summary |
||
| Line 5: | Line 5: | ||
|- | |- | ||
|Date | |Date | ||
|2026- | |2026-03-04 | ||
|- | |- | ||
|Severity | |Severity | ||
Revision as of 13:01, 4 March 2026
| Date | 2026-03-04 |
| Severity | reported "high", BlueSpice assessment: low |
| Affected | Services in LTS version < 5.1.5
BlueSpice PRO/FARM < 5.1.5 BlueSpice PRO/FARM < 5.2.0 |
| Fixed in | BlueSpice PRO/FARM 5.1.4
BlueSpice PRO/FARM 5.2.1 |
| CVE |
Problem
| CVE | Component | Type of vulnerability | BlueSpice 5 | BlueSpice 4 |
|---|---|---|---|---|
| CVE-2025-15467 | Container bluespice/database |
Buffer Overflow | affected | affected |
| CVE-2026-24732 | Information Disclosure | affected | not affected |
Impact assessment
| CVE | Assessment | Mitigation without update |
|---|---|---|
| CVE-2025-15467 | Low | Make sure the service has no access to the internet. This is the default configuration of BlueSpice setups |
| CVE-2026-24732 | Medium | None |
Solution
To mitigate CVE-2026-24732 , please update to
