Your review has been sent successfully

IBM Updates

1792
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

● Critical

● High

● Medium

● Low

Most Viewed Warnings

Dell EMC Alert

● Critical

F5 Alert

● High

IBM Alert

● Critical

Fortinet Alert

● High

Red Hat Alert

● High

حملات تصيدية تستهدف مايكروسوفت تيمز (Microsoft Teams)

● High

Warning Date

Severity Level

Warning Number

Target Sector

31 March, 2020

● Medium

2020-1074

All

Description:

IBM has released security updates to address multiple vulnerabilities in the following products:

  • NovaLink
    • 1.0.0.13
    • 1.0.0.15
  • Sterling Connect Direct File Agent
    • 1.4
  • IBM i
    • 7.4
    • 7.3
    • 7.2
    • 7.1
  • Financial Transaction Manager for ACH Services for Multi-Platform
    • 3.1.0.0-3.1.0.3
    • 3.0.6.0-3.0.6.10
  • IBM Tivoli Application Dependency Discovery Manager
    • 7.3.0
  • RBD
    • 9.5
    • 9.6
  • WebSphere Application Server
    • 9.0
    • 7.0
    • 8.0
    • 8.5
  • Rational Asset Manager
    • 7.5.4.3
  • IBM Tivoli Netcool Impact 6.1.x
    • All versions
  • IBM Tivoli Netcool Impact 7.1.0
    • 7.1.0.0~7.1.0.17
  • IBM Secure Proxy
    • 6
  • IBM Sterling Secure Proxy
    • 3.4.3.2
    • 3.4.2
  • DOORS Web Access:
    • 9.5.1 – 9.5.1.10
    • 9.5.2 – 9.5.2.9
    • 9.6.0 – 9.6.0.8
    • 9.6.1 – 9.6.1.11
    • 9.7.0 – 9.7.0.1
  • IBM Business Automation Workflow
    • 18.0.0.0 – 19.0.0.3
  • IBM Business Process Manager
    • 8.6-8.6 CF2018.03
    • 8.5.7 2017.06
  • Sterling External Authentication Server
    • 2.4.2
  • IBM External Authentication Server
    • 6.0.0.1
  • IBM Sterling External Authentication Server
    • 2.4.3.2
  • IBM Tivoli Netcool Impact
    • 6.1.0.0 – 6.1.0.4 Interim Fix 1
  • IBM Tivoli Netcool
    • 6.1.1.0 – 6.1.1.5 Interim Fix 2
  • IBM Tivoli Netcool
    • 7.1.0.0 – 7.1.0.17
  • IBM Content Navigator
    • 3.0CD
  • API Connect
  • IBM API Connect
    • 5.0.0.0-5.0.8.7
  • IBM API Connect
    • 2018.4.1.0-2018.4.1.8
  • ITNM
    • 4.2.0.x
  • SPSS Statistics
    • 26
    • 25
    • 24
    • 23
  • z/Transaction Processing Facility
    • 1.1
  • IBM CICS Transaction Gateway
    • 9.1
    • 9.2
    • 9
    • 8.1
    • 8
  • Jazz for Service Management
    • 1.1.3
  • IBM Cloud Application Performance Management, Base Private
    • 8.1.3
    • 8.1.4
  • IBM Cloud Application Performance Management, Advanced Private
    • 8.1.3
    • 8.1.4
  • IBM Cloud Application Performance Management

Threats:

  • Consume CPU resources remotely
  • Denial of service (DoS)
  • Execute arbitrary code
  • Elevated privileges
  • Bypass security restrictions
  • Obtain sensitive information remotely
  • Frequently repeatable crash (complete DOS) of MySQL Server
  • Unauthorized access to the system remotely
  • Cross-site scripting (XSS)

Best practice and Recommendations:

The CERT team encourages users to apply the necessary update according to the link below:

Last updated at 31 March, 2020

Rate the content

rate-icon
up icon