The official site for Saudi CERT
IBM Alert
2529
Warning Date
Severity Level
Warning Number
Target Sector
23 August, 2022
● High
2022-5151
All
Description:
IBM has released security updates to address several vulnerabilities in several products:
- IBM Sterling B2B Integrator
- 46.1.0.0 – 6.1.1.1
- IBM Security Verify Governance
- 10.0
- IBM Sterling Connect:Direct for UNIX
- 6.2.0.0 – 6.2.0.4.iFix017
- IBM MQ
- 9.1 LTS
- 9.0 LTS
- 9.2 CD
- 9.1 CD
- 9.2 LTS
- IBM Security Verify Governance
- 10.0
- IBM Security Guardium Key Lifecycle Manager
- 4.1.1
- 4.1.1
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code
- Denial of service attack (DoS)
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-b2b-integrator-vulnerable-to-multiple-vulnerabilities-due-to-apache-commons-compress/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-verify-governance-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-4104-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-connectdirect-for-unix-is-vulnerable-to-denial-of-service-due-to-google-gson-cve-2022-25647/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-is-vulnerable-to-issues-with-libcurl-cve-2022-27780-cve-2022-30115/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-verify-governance-is-vulnerable-to-multiple-security-issues-due-to-node-js-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-dojo-library-shipped-with-ibm-security-guardium-key-lifecycle-manager-sklm-gklm-cve-2019-10785-cve-2020-5259-cve-2020/
Rate the content
Share the page
