The official site for Saudi CERT
IBM Updates
1900
Warning Date
Severity Level
Warning Number
Target Sector
20 June, 2021
● Critical
2021-3074
All
Description:
IBM has released a security update to address several vulnerabilities in the following products:
- All PROTOCOL-RabbitMQ
- versions before 7.3.0-QRADAR-PROTOCOL-RabbitMQ-7.3-20210505121416.noarch.rpm
- versions before 7.4.0-QRADAR-PROTOCOL-RabbitMQ-7.4-20210505121348.noarch.rpm
- IBM Tivoli Netcool/OMNIbus Integration – Probe for Microsoft Exchange Web Services
- nco-p-ews-1_0 up to and including nco-p-ews-2_0
- IBM Tivoli Netcool/OMNIbus Integration – Transport Module Common Integration Library
- common-transportmodule-12_0 up to and including common-transportmodule-28_0
- IBM i
- 7.1
- 7.2
- 7.3
- 7.4
- Platform Navigator in IBM Cloud Pak for Integration (CP4I)
- 2020.4.1-0-eus
- 2020.4.1-1-eus
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service (DoS)
- Disclose sensitive information
- Execute arbitrary code
- Directory Traversal
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-identity-manager-virtual-appliance-deprecated-self-service-ui-contains-struts-v1-cve-2016-1182/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-identity-manager-deprecated-self-service-ui-contains-struts-v1-cve-2016-1182/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-resilient-soar-is-vulnerable-to-command-injection-cve-2021-20527-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-websphere-application-server-java-batch-is-vulnerable-to-an-xml-external-entity-injection-xxe-vulnerability-cve-2021-20492-3/
- https://www.ibm.com/blogs/psirt/security-bulletin-rabbitmq-as-used-by-ibm-qradar-siem-is-vulnerable-to-unsafe-deserialization-cve-2020-36282/
- https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-have-been-identified-in-apache-commons-io-shipped-with-ibm-tivoli-netcool-omnibus-probe-for-microsoft-exchange-web-services-cve-2021-29425/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-have-been-identified-in-netty-shipped-with-ibm-tivoli-netcool-omnibus-transport-module-common-integration-library-cve-2021-21290-cve-2021-21295-cve-2021/
- https://www.ibm.com/blogs/psirt/security-bulletin-bind-for-ibm-i-is-affected-by-cve-2021-25214-and-cve-2021-25215/
- https://www.ibm.com/blogs/psirt/security-bulletin-rabbitmq-as-used-by-ibm-qradar-siem-is-vulnerable-to-unsafe-deserialization-cve-2020-36282-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-pak-for-integration-is-vulnerable-to-node-js-lodash-vulnerability-cve-2020-28500/
- https://www.ibm.com/support/pages/node/6465181
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-pak-for-integration-is-vulnerable-to-node-js-lodash-vulnerability-cve-2021-23337/
Rate the content
Share the page
