Your review has been sent successfully

IBM Updates

2739
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

● Critical

● High

● Medium

● Low

Most Viewed Warnings

Dell EMC Alert

● Critical

F5 Alert

● High

IBM Alert

● Critical

Fortinet Alert

● High

Red Hat Alert

● High

حملات تصيدية تستهدف مايكروسوفت تيمز (Microsoft Teams)

● High

Warning Date

Severity Level

Warning Number

Target Sector

19 July, 2020

● Critical

2020-1521

All

Description:

IBM has released security updates to address multiple vulnerabilities in the following products:

  • Netcool/OMNIbus Probe DSL Factory Framework
    • probe-dsl-framework-1_0 up to and including probe-dsl-framework-6_0
  • IBM Aspera High-Speed Transfer Server
    • 3.9.1 and earlier
  • IBM Aspera High-Speed Transfer Endpoint
    • 3.9.1 and earlier
  • IBM Aspera Desktop Client
    • 3.9.1 and earlier
  • IBM Control Center
    • 6.1.3
    • 6.0.0.2
  • IBM Spectrum Protect Client
    • 8.1.0.0-8.1.9.1 (Macintosh & Windows)
    • 8.1.7.0-8.1.9.1 (Linux – web user interface only)
    • 8.1.9.0-8.1.9.1 (AIX – web user interface only)
    • 7.1.0.0-7.1.8.8 (Macintosh & Windows)
  • IBM Spectrum Protect for Space Management
    • 8.1.7.0-8.1.9.1 (Linux)
    • 8.1.9.0-8.1.9.1 (AIX)
  • IBM Spectrum Protect for Virtual Environments: Data Protection for VMware
    • 8.1.0.0-8.1.9.1 (Linux & Windows)
    • 7.1.0.0-7.1.8.8 (Linux & Windows)
  • IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V
    • 8.1.0.0-8.1.9.1 (Windows)
    • 7.1.0-0-7.1.8.x (Windows)
  • IBM Control Center
    • 6.1.3.0
    • 6.1.2.1
    • 6.0.0.2
  • IBM Security SiteProtector System
    • 3.0.0
    • 3.1.1
  • WebSphere Application Server
    • 9.0
    • 8.5
    • 8.0
    • 7.0
  • IBM Spectrum Protect Snapshot for VMware
    • 4.1.0.0-4.1.6.9
  • ITCAM for Transactions
    • 7.4.0.1
    • 7.4.0.2
  • IBM Netezza Platform Software
    • earlier than 7.2.1.9
  • API Connect
    • V5.0.0.0-5.0.8.8
  • IBM MQ for HPE NonStop
    • 8.1.0
    • 8.0.4
  • IBM Watson Machine Learning Community Edition
    • 1.6.2
    • 1.7.0
  • IBM Emptoris Contract Management
    • 10.1.3.x
    • 10.1.1.x
    • 10.1.0.x
  • IBM Emptoris Strategic Supply Management Platform
    • 10.1.3.x
    • 10.1.1.x
    • 10.1.0.x
  • IBM Emptoris Supplier Lifecycle Mgmt
    • 10.1.3.x
    • 10.1.1.x
    • 10.1.0.x
  • IBM Emptoris Program Management
    • 10.1.3.x
    • 10.1.1.x
    • 10.1.0.x
  • IBM Emptoris Sourcing
    • 10.1.3.x
    • 10.1.1.x
    • 10.1.0.x
  • IBM Spectrum Protect Plus
    • 10.1.0-10.1.5
  • IBM Security Secret Server
    • All versions
  • IBM Content Classification
    • 8.8
  • IBM Operations Analytics Predictive Insights
    • 1.3.6
  • IBM Planning Analytics
    • 2.0
  • ICP – Discovery
    • 2.0.0-2.1.2

Threats:

Attacker could exploit these vulnerabilities by doing the following:

  • Denial of service (DoS).
  • Obtain sensitive information.
  • Cross-site scripting (XSS) attack.
  • Remote code execution.

Best practice and Recommendations:

The CERT team encourages users to review IBM security advisory and apply the necessary updates:

Last updated at 19 July, 2020

Rate the content

rate-icon
up icon