Your review has been sent successfully

IBM Updates

1720
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

● Critical

● High

● Medium

● Low

Most Viewed Warnings

Dell EMC Alert

● Critical

F5 Alert

● High

IBM Alert

● Critical

Fortinet Alert

● High

Red Hat Alert

● High

حملات تصيدية تستهدف مايكروسوفت تيمز (Microsoft Teams)

● High

Warning Date

Severity Level

Warning Number

Target Sector

27 September, 2020

● High

2020-1842

All

Description:

IBM has released security updates to address vulnerabilities in the following products:

  • Kernel
    • IBM Netezza Host Management
  • WebSphere Application Server and IHS server
    • IBM Tivoli Monitoring 6.3.0 Fix Pack 7 Service Pack 5
  • IBM Security Secret Server all versions prior to 10.9
  • IBM Security Privilege Manager all versions prior to 10.8
  • IBM Java Runtime
    • IBM Spectrum Conductor with Spark 2.2.1
    • IBM Spectrum Conductor 2.2.1, 2.4.0, 2.4.1, 2.3.0
  • Apache Struts
    • IBM Tivoli Netcool/OMNIbus_GUI 8.1.x
  • IBM Business Automation Workflow V20.0, V19.0, V18.0
  • IBM Business Process Manager V8.6, V8.5, V8.0
  • WebSphere Application Server 9.0, 8.5, 8.0, 7.0
  • Java SDK
    • IBM Engineering Workflow Management EWM 7.0.1
    • RTC 6.0.2
    • RTC 6.0.6.1
    • EWM 7.0
    • RTC 6.0.6
    • Rhapsody DM 6.0.6
    • IBM Engineering Systems Design Rhapsody – Design Manager RDM 7.0.1
    • Rhapsody DM 6.0.6.1
    • Rhapsody DM 6.0.2
    • RDM 7.0
    • RDNG 6.0.2
    • DOORS Next 7.0
    • IBM Engineering Requirements Management DOORS Next DOORS Next 7.0.1
    • RDNG 6.0.6.1
    • RDNG 6.0.6
    • CLM 6.0.6.1
    • CLM 6.0.6
    • ELM 7.0
    • CLM 6.0.2
    • ELM 7.0.1
    • RQM 6.0.6.1
    • IBM Engineering Test Management ETM 7.0.1
    • RQM 6.0.6
    • ETM 7.0.0
    • RQM 6.0.2
    • RELM 6.0.6.1
    • IBM Engineering Lifecycle Optimization – Engineering Insights ENI 7.0.1
    • RELM 6.0.6
    • ENI 7.0
    • RELM 6.0.2
    • IBM Engineering Systems Design Rhapsody All
  • InfoSphere Information Server 11.7
  • Java
    • IBM Control Center 6.1.3, 6.0.0.2
  • IBM Enterprise Records 5.2.1
  • Redis
    • IBM Event Streams 10.0.0, CDR
  • Go runtime
    • IBM Event Streams 2018.3.0, CDR
  • Node.js http-proxy and lodash module
    • IBM Event Streams 2018.3.0, CDR
  • OpenSSL
    • IBM Cloud Private 3.2.0 CD, 3.2.1 CD
  • Node.js lodash
    • IBM Cloud Private 3.2.1 CD, 3.2.2 CD

Threats:

Attacker could exploit these vulnerabilities by doing the following:

  • Sensitive information disclosure
  • Denial of service attack (DoS)
  • Execute arbitrary code -remotely

Best practice and Recommendations:

The CERT team encourages users to review IBM security advisory and apply the necessary updates:

Last updated at 27 September, 2020

Rate the content

rate-icon
up icon