Your review has been sent successfully

IBM Updates

1948
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

● Critical

● High

● Medium

● Low

Most Viewed Warnings

Dell EMC Alert

● Critical

F5 Alert

● High

IBM Alert

● Critical

Fortinet Alert

● High

Red Hat Alert

● High

حملات تصيدية تستهدف مايكروسوفت تيمز (Microsoft Teams)

● High

Warning Date

Severity Level

Warning Number

Target Sector

25 April, 2021

● High

2021-2821

All

Description:

IBM has released a security update to address several vulnerabilities in their products, the most important ones:

  • IBM DB2 Server
    • IBM Emptoris Supplier Lifecycle Mgmt 10.1.1.x
    • IBM Emptoris Supplier Lifecycle Mgmt 10.1.0.x
    • IBM Emptoris Supplier Lifecycle Mgmt 10.1.3.x
    • IBM Emptoris Strategic Supply Management Platform 10.1.0.x,10.1.1.x,10.1.3.x
    • IBM Emptoris Sourcing IBM Emptoris Sourcing 10.1.0.x
    • IBM Emptoris Sourcing 10.1.1.x
    • IBM Emptoris Sourcing IBM Emptoris Sourcing 10.1.3.x
    • IBM Emptoris Program Management 10.1.0.x
    • IBM Emptoris Program Management 10.1.1.x
    • IBM Emptoris Program Management 10.1.3.x
  • Apache MyFaces
    • Liberty for Java in IBM Cloud up to and including v3.55
  • Db2 V9.7, V10.1, V10.5, V11.1, and V11.5 editions on Windows
  • IBM® Runtime Environments Java™ Technology Edition
    • DB2 9.7.x
    • DB2 10.1.x
    • DB2 10.5.x
    • DB2 11.1.x
    • DB2 11.5.x
  • FasterXML jackson-databind
    • Log Analysis 1.3.1
    • Log Analysis 1.3.2
    • Log Analysis 1.3.3
    • Log Analysis 1.3.4
    • Log Analysis 1.3.5
    • Log Analysis 1.3.6
  • IBM Spectrum Protect Backup-Archive Client 8.1.0.0-8.1.11.0
  • IBM Spectrum Protect for Space Management 8.1.0.0-8.1.11.0
  • IBM Spectrum Protect for Virtual Environments: Data Protection for VMware 8.1.0.0-8.1.11.0
  • IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V 8.1.0.0-8.1.11.0
  • IBM Spectrum Protect Plus 10.1.0-10.1.6
  • Golang
    • IBM Spectrum Protect Plus Container backup and restore for Kubernetes 10.1.5-10.1.7
    • IBM Spectrum Protect Plus Container backup and restore for OpenShift 10.1.7
  • IBM Db2
    • IBM Spectrum Protect Server 8.1.0.000-8.1.11.xxx, 7.1.0.000-7.1.12.xxx
  • Python
    • IBM Spectrum Protect Plus Microsoft File Systems backup and restore 10.1.6-10.1.7
  • Genivia gSOAP
    • IBM Spectrum Protect for Virtual Environments: Data Protection for VMware 8.1.0.0-8.1.11.0
  • IBM Java Runtime
    • SPSS Statistics 27.0.1
    • SPSS Statistics 26.0
    • SPSS Statistics 25.0
    • SPSS Statistics 24.0
  • IBM Business Automation Workflow V20.0, V19.0, V18.0
  • IBM Business Process Manager V8.6, V8.5
  • OpenSSL
    • IBM Spectrum Protect Backup-Archive Client 8.1.0.0-8.1.11.0
  • Java SE and Eclipse OpenJ9
    • DB2 Recovery Expert for LUW 5.5
    • DB2 Recovery Expert for LUW 5.5 IF1
    • DB2 Recovery Expert for LUW 5.5 IF2
    • DB2 Recovery Expert for LUW 5.5.0.1
    • DB2 Recovery Expert for LUW 5.5.0.1 IF0
    • DB2 Recovery Expert for LUW 5.5.0.1 IF1

Threats:

Attacker could exploit these vulnerabilities by doing the following:

  • Denial of service attack (DoS)
  • Execute arbitrary code
  • XML external entity (XXE) attack
  • Cross-site request forgery (CSRF)

Best practice and Recommendations:

The CERT team encourages users to review IBM security advisory and apply the necessary updates:

Last updated at 25 April, 2021

Rate the content

rate-icon
up icon