IBM Updates
2606Warning Date
Severity Level
Warning Number
Target Sector
25 October, 2020
● High
2020-1968
All
Description:
IBM has released security updates to address vulnerabilities in the following products:
- IBM Java SDK
- Enterprise Content Management System Monitor
- 5.5
- IBM Tivoli System Automation Application Manager
- 4.1
- Enterprise Content Management System Monitor
- IBM® Runtime Environment Java
- SPSS Statistics
- 27.0
- 26.0
- 25.0
- 24.0
- 23.0
- z/Transaction Processing Facility
- 1.1
- IBM Spectrum Symphony
- 7.3.0.1
- 7.3
- 7.2.1
- 7.2.0.2
- 7.1.2
- 7.1.1
- 7.1 Fix Pack 1
- SPSS Statistics
- WebSphere Application Server and IHS server
- IBM Tivoli Monitoring
- 6.3.0 Fix Pack 7 Service Pack 5 (or later Service Pack)
- IBM Tivoli Monitoring
- IBM Security Guardium
- 11.0
- 11.1
- PowerSC
- 1.2
- 1.3
- IBM API Connect
- V2018.4.1.0-2018.4.1.12
- V10.0.0
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS)
- Unauthorized disclosure of information
- Code Injection
- Escalation of Privileges
- Execute arbitrary code remotely
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/support/pages/node/6351391
- https://www.ibm.com/support/pages/node/6351659
- https://www.ibm.com/support/pages/node/6351367
- https://www.ibm.com/support/pages/node/6351443
- https://www.ibm.com/support/pages/node/6351533
- https://www.ibm.com/support/pages/node/6347588
- https://www.ibm.com/support/pages/node/6351365
- https://www.ibm.com/support/pages/node/6351653
- https://www.ibm.com/support/pages/node/6353035
- https://www.ibm.com/support/pages/node/6352903
- https://www.ibm.com/support/pages/node/6324763