The official site for Saudi CERT
IBM Alert
2538
Warning Date
Severity Level
Warning Number
Target Sector
31 March, 2022
● High
2022-4584
All
IBM has released security updates to address several vulnerabilities in the following products, mainly:
- IBM Spectrum Control
- Sterling Connect:Direct Browser User Interface
- IBM® Security SOAR
- IBM Security QRadar SOAR
- IBM Cloud Pak for Business Automation
An attacker could exploit these vulnerabilities by doing the following:
- Cross-site scripting (XSS) attack
- Remote code execution
The CERT team encourages users to review IBM security advisory and apply the necessary updates, mainly:
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-network-security-is-affected-by-wget-vulnerability-cve-2021-31879/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-network-security-is-affected-by-wget-vulnerability-cve-2021-31879/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-verify-access-is-vulnerable-to-obtaining-sensitive-information-due-to-improper-validation-of-jwt-tokens/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-spring-3/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-numpy/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-websphere-cast-iron-solution-app-connect-professional-9/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-fasterxml-jackson-databind-10/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tivoli-netcool-omnibus-transport-module-common-integration-library-is-vulnerable-to-http-request-smuggling-due-to-netty-cve-2021-43797/
Rate the content
Share the page
