IBM Updates

Your review has been sent successfully

2347

Security Alert

● Critical

● High

● Medium

● Low

Warning Date

Severity Level

Warning Number

Target Sector

26 December, 2021

● Critical

2021-4139

All

Description:

IBM has released security updates to address several vulnerabilities in the following products:

Products that affected by the Apache Log4j vulnerability:

IBM Sterling Connect:Direct Web Services
- 6.1.0
- 6.2.0
IBM IoT MessageSight
- 2.0
- 5.0.0.0
IBM WIoTP MessageGateway
- 5.0.0.2
IBM Watson Knowledge Catalog in Cloud Pak for Data
- 4.0
IBM Netezza Host Management
- starting 5.4.9.0
IBM Security Guardium
- 10.5
- 10.6
- 11.0
- 11.1
- 11.2
- 11.3
- 11.4
IBM Db2
- V10.5, V11.1, and V11.5
IBM Event Streams
- 2019.4.1, 2019.4.2, 2019.4.3, 2019.4.4, 2019.4.5
- 10.0.0, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.4.0
IBM Spectrum Control
- 5.4.0 – 5.4.5
IBM Workload Scheduler
- 9.5.0.5
i2 Analyze
- 4.3.5.0
- 4.3.4.0
- 4.3.3.0
- 4.3.2.0
i2 Connect
- 1.1.1
- 1.1.0
- 1.1.3
- 1.0.2
Analyst's Notebook Premium
- 9.3.1
- 9.3.0

Threats:

A remote attacker could exploit these vulnerabilities by executing arbitrary code.

Best practice and Recommendations:

The CERT team encourages users to review IBM security advisory and apply the necessary updates:

Last updated at 26 December, 2021