IBM Updates
3570Warning Date
Severity Level
Warning Number
Target Sector
2 September, 2019
● High
2019-387
All
Description:
IBM has released security updates to address vulnerabilities in the following products:
- IBM InfoSphere Master Data Management V11.0, V11.3, V11.4, V11.5, V11.6.
- Releases 7.1, 7.2, 7.3 and 7.4 of IBM i.
- IBM CPLEX Optimization Studio and IBM CPLEX Enterprise Server 12.9 and earlier releases.
- WebSphere Cast Iron v 7.5.0.0, 7.5.0.1, 7.5.1.0, 7.0.0.0, 7.0.0.1, 7.0.0.2.
- App Connect Professional v 7.5.2.0, 7.5.3.0.
- VRA – Vyatta 5600.
- IBM SPSS Collaboration and Deployment Services 7.0.0.1, 8.0.0.0, 8.1.0.0, 8.2, 8.2.1.0.
- IBM® Intelligent Operations Center V5.1.0 – V5.2.0.
- IBM® Intelligent Operations Center for Emergency Management V5.1.0 – V5.1.0.6.
- IBM® Water Operations for Waternamics V5.1.0 – V5.2.1.1.
- IBM SDK, Java Technology Edition, Version 7 Service Refresh 10 Fix Pack 40 and earlier releases IBM SDK, Java Technology Edition, Version 8 Service Refresh 5 Fix Pack 30 and earlier releases.
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized disclosure of information remotely.
- Unauthorized disclosure of information remotely.
- Denial of service attack (DoS) – remotely.
- Code injection.
- Escalation of privilege.
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates: