IBM Updates
3027Warning Date
Severity Level
Warning Number
Target Sector
17 November, 2019
● Medium
2019-634
All
Description:
IBM has released security updates to address vulnerabilities in the following products:
- WebSphere Application Server
- Connect
- IBM OS Image for Red Hat Linux Systems
- IBM Cloud APM, Base Private
- IBM Cloud APM, Advanced Private
- IBM Cloud APM
- IBM Monitoring
- IBM Application Diagnostics
- IBM Application Performance Management
- IBM Application Performance Management Advanced
- COS SDK Java
- IBM Spectrum Symphony
- IBM Platform Symphony
- UCD – IBM UrbanCode Deploy
- IBM Spectrum Protect Operations Center
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of Service (DoS)
- Information disclosure
- Obtain sensitive information remotely
- Execute arbitrary code remotely
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates: https://www.ibm.com/blogs/psirt/