F5 Networks Alert
3112Warning Date
Severity Level
Warning Number
Target Sector
17 April, 2022
● Critical
2022-4682
All
Description:
IBM has released security updates to address several vulnerabilities in the following products:
- IBM Netezza Analytics
- IBM Security Guardium
- IBM Informix Dynamic Server
- IBM Netezza Analytics for NPS
- IBM Security SiteProtector System
- IBM Sterling B2B Integrator
- ITNM
Threats:
An attacker could exploit a vulnerability by doing the following:
- Sensitive information disclosure
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/blogs/psirt/security-bulletin-expat-vulnerabilities-affect-ibm-netezza-analytics/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-multiple-vulnerabilities-12/
- https://www.ibm.com/blogs/psirt/security-bulletin-gdal-vulnerabilities-affect-ibm-netezza-analytics-for-nps/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-informix-dynamic-server-is-vulnerable-to-denial-of-service-cve-2021-45105-and-remote-code-execution-cve-2021-45046-due-to-apache-log4j/
- https://www.ibm.com/blogs/psirt/security-bulletin-expat-vulnerabilities-affect-ibm-netezza-analytics-for-nps/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-siteprotector-system-is-affected-by-apache-http-server-vulnerabilities-cve-2021-40438-cve-2021-34798/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-b2b-integrator-vulnerable-to-multiple-vulnerabilities-due-to-spring-security/
- https://www.ibm.com/blogs/psirt/security-bulletin-due-to-use-of-apache-storm-ibm-tivoli-network-manager-is-vulnerable-to-arbiraty-code-execution-cve-2021-38294-cve-2021-40865/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-multiple-vulnerabilities-in-apache-thrift/
- https://www.ibm.com/blogs/psirt/security-bulletin-publicly-disclosed-vulnerabilities-in-plexus-utils-affect-ibm-netezza-analytics/