IBM Alert
2922Warning Date
Severity Level
Warning Number
Target Sector
9 February, 2022
● High
2022-4348
All
Description:
IBM has released security updates to address several vulnerabilities in its products:
- IBM UrbanCode Build
- 6.1.7.2
- Security Directory Server Virtual Appliance
- 8.0.1
- IBM OpenPages with Watson
- 8.1 - 8.2.0.3
- IBM Cloud Object Storage Systems
- 3.16.3.36 or Prior Release
- IBM TRIRIGA Application Platform
- 3.8
- IBM TRIRIGA
- 4.0
- Platform Navigator in IBM Cloud Pak for Integration (CP4I)
- 2020.4.1
- 2021.1.1
- 2021.2.1
- 2021.3.1
- Netcool Operations Insight
- 1.4.x
- 1.5.x
- 1.6.x
- IBM Netezza Analytics
- All versions <= 3.3.10
Threats:
An attacker could exploit these vulnerabilities by executing arbitrary code.
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-urbancode-build-is-affected-by-cve-2021-30639/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-ibm-java-sdk-that-affect-ibm-security-directory-suite-july-2021-cpu/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-ibm-websphere-application-server-liberty-shipped-with-ibm-security-directory-suite/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-ibm-java-sdk-that-affect-ibm-security-directory-suite-october-2021-cpu/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-openpages-with-watson-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2019-17571/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-ibm-cloud-object-storage-systems-feb-2022-v1/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tririga-reporting-a-component-of-ibm-tririga-application-platform-is-vulnerable-to-denial-of-service-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-44228/
- https://www.ibm.com/blogs/psirt/security-bulletin-security-bulletin-vulnerability-in-apache-log4j-affects-netcool-operation-insight-cve-2021-44228-2/
- https://www.ibm.com/blogs/psirt/security-bulletin-log4j-vulnerabilities-affect-ibm-netezza-analytics/