The official site for Saudi CERT
IBM Alert
3110
Warning Date
Severity Level
Warning Number
Target Sector
5 April, 2022
● Critical
2022-4613
All
Description:
IBM has released security updates to address several vulnerabilities in the following products, mainly:
- IBM MQ Operator CD Release
- IBM MQ Advanced Server Container image
- IBM Tivoli Netcool Impact
- IBM Tivoli Netcool Impact
- IBM Tivoli Netcool Impact
- IBM Maximo Asset Management
- IBM Tivoli Netcool Impact
- IBM Integration Bus
- IBM App Connect Enterprise
- IBM App Connect Enterprise
- IBM PureData System for Operational Analytics
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Escalation of privilege
- Denial of service attack (DoS)
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates, mainly:
- vulnerable-to-multiple-issues-within-red-hat-ubi-packages-and-the-ibm-websphere-application-server-liberty-shipped-with-ibm-mq/
- https://www.ibm.com/blogs/psirt/security-bulletin-a-security-vulnerability-has-been-identified-in-dojo-toolkil-shipped-with-ibm-tivoli-netcool-impact-cve-2021-23450/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tivoli-netcool-impact-is-affected-by-an-apache-log4j-vulnerability-cve-2022-23302/
- https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-has-been-identified-in-ibm-websphere-application-server-liberty-shipped-with-ibm-tivoli-netcool-impact-cve-2021-39031/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-maximo-asset-management-may-be-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-1-2-cve-2021-4104/
- https://www.ibm.com/blogs/psirt/security-bulletin-one-or-more-security-vulnerabilities-has-been-identified-in-ibm-db2-shipped-with-ibm-puredata-system-for-operational-analytics-cve-2018-1980cve-2019-4094cve-2018-1922/
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tivoli-netcool-impact-is-affected-by-gson-vulnerability-c2021-0419/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-integration-bus-and-ibm-app-connect-enterprise/
Rate the content
Share the page
