IBM Alert
2776Warning Date
Severity Level
Warning Number
Target Sector
19 May, 2022
● High
2022-4856
All
IBM has released security updates to address several vulnerabilities in the following products, mainly:
- PowerVC
- 2.0.2
- 2.0.2.1
An attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code
- Improper Input Validation
The CERT team encourages users to review IBM security advisory and apply the necessary updates, mainly:
- https://www.ibm.com/blogs/psirt/security-bulletin-due-to-use-of-ibm-sdk-java-technology-edition-ibm-tivoli-application-dependency-discovery-manager-taddm-is-vulnerable-to-denial-of-service-4/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-apache-commons-compress-affect-websphere-application-server-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-identity-governance-and-intelligence-is-vulnerable-to-exposure-of-sensitive-information-cve-2021-35603/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-identity-governance-and-intelligence-is-vulnarable-to-exposure-of-sensitive-information-cve-20204970/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-identity-governance-and-intelligence-is-vulnerable-to-denial-of-service-cve-2021-35578/