The official site for Saudi CERT
IBM Alert
2358
Warning Date
Severity Level
Warning Number
Target Sector
28 June, 2022
● High
2022-5005
All
Description:
IBM has released security updates to address several vulnerabilities in the following products:
- IBM Cloud Transformation Advisor
- 2.0.1 – 3.1.0
- IBM Common Licensing
- ART 9.0
- IBM Tivoli Netcool/OMNIbus_GUI
- 8.1.0 FP26 and earlier
- IBM Robotic Process Automation
- 21.0.1 < 21.0.1.5
- IBM Netezza As A Service
- 11.2.2.1 – 11.2.2.2
- IBM i
- 7.5
- 7.4
- 7.3
- 7.2
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Obtain sensitive information
- Denial of service (DoS)
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-transformation-advisor-is-vulnerable-to-multiple-vulnerabilities-3/
- https://www.ibm.com/blogs/psirt/security-bulletin-a-remote-attack-vulnerability-in-apache-log4j-affects-ibm-common-licensings-license-key-server-lks-administration-and-reporting-tool-art-and-its-agentcve-2021-4104cve-20/
- https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-lodash-library-affect-tivoli-netcool-omnibus-webgui-cve-2019-1010266-cve-2020-28500-cve-2018-16487-cve-2018-3721-cve-2020-8203-cve-2021-23337-cve-2019-1074/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-robotic-process-automation-may-be-affected-by-multiple-vulnerabilities-in-open-source-components-cve-2019-0820-cve-2020-15522-cve-2021-43569/
- https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-struts-library-affect-tivoli-netcool-omnibus-webgui-cve-2021-31805/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-netezza-as-a-service-is-vulnerable-to-denial-of-service-due-to-golang-net-package-cve-2021-33194-cve-2021-44716-cve-2021-31525/
- https://www.ibm.com/blogs/psirt/security-bulletin-openssl-for-ibm-i-is-vulnerable-to-command-injection-due-to-a-flaw-in-c_rehash-script-cve-2022-1292/
- https://www.ibm.com/blogs/psirt/security-bulletin-zlib-for-ibm-i-is-vulnerable-to-a-denial-of-service-attack-due-to-memory-corruption-cve-2018-25032/
Rate the content
Share the page
