The official site for Saudi CERT
IBM Updates
2490
Warning Date
Severity Level
Warning Number
Target Sector
30 September, 2020
● Medium
2020-1855
All
Description:
IBM has released security updates to address multiple vulnerabilities in the following products:
- IBM Cloud Event Management on IBM Cloud Private
- IBM® SDK Java™ Technology Edition
- Cloud Orchestrator - 2.5.0.10
- IBM Tivoli Netcool OMNIbus Gateway for CEM
- nco-g-cem-3_0 and earlier
- IBM Tivoli Netcool OMNIbus Gateway for ServiceNow
- nco-g-servicenow-3_0 and earlier
- IBM Cloud Manager
- 4.3
- IBM Operations Analytics Predictive Insights
- 1.3.6
- IBM Tivoli Netcool Impact 7.1.0
- 7.1.0.0~7.1.0.19
- WebSphere Application Server
- 9.0
- 8.5
- 8.0
- 7.0
- IBM Cloud Pak for Automation
- 20.0.2
- 20.0.1
- IBM Global High Availability Mailbox
- 6.0.2
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Obtain sensitive information.
- Cross-site scripting (XSS) attack.
- Denial of service (DoS).
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-cloud-orchestrator-and-ibm-cloud-orchestrator-enterprise-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-commons-codec-affects-netcool-omnibus-cem-gateway-and-servicenow-gateway/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-manager-with-openstack-is-affected-by-a-openssl-vulnerability/
- https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-commons-codec-affects-ibm-operations-analytics-predictive-insights/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tivoli-netcool-impact-is-affected-by-an-apache-commons-codec-vulnerability/
- https://www.ibm.com/blogs/psirt/security-bulletin-version-4-17-15-of-node-js-module-lodash-included-in-ibm-netcool-operations-insight-1-6-1-x-has-a-security-vulnerability/
- https://www.ibm.com/blogs/psirt/security-bulletin-websphere-application-server-is-vulnerable-to-an-information-exposure-vulnerability-cve-2020-4629/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-middleware-software-affect-ibm-cloud-pak-for-automation-3/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-sdk-java-technology-edition-may-affect-ibm-cloud-orchestrator-and-ibm-cloud-orchestrator-enterprise/
- https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-websphere-application-server-affect-ibm-cloud-orchestrator-and-ibm-cloud-orchestrator-enterprise-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-version-5-0-5-of-redis-included-in-ibm-netcool-operations-insight-1-6-1-x-has-a-security-vulnerability-cve-2020-14147/
- https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerability-in-websphere-liberty-server-shipped-with-ibm-global-mailbox-cve-2020-4329/
Rate the content
Share the page
