The official site for Saudi CERT
IBM Updates
2116
Warning Date
Severity Level
Warning Number
Target Sector
9 February, 2020
● High
2020-892
All
Description:
IBM has released security updates to address vulnerabilities in the following products:
- OpenSSL
- IBM Aspera Orchestrator
- IBM Shares
- IBM Aspera Faspex
- IBM Aspera Console
- Apache
- IBM Aspera Faspex
- IBM Aspera Console
- IBM Aspera Shares
- IBM Aspera Orchestrato
- IBM Java SDK shipped with IBM WebSphere Application Server
- IBM Cloud Object Storage Systems
- NGINX
- IBM Aspera Shares
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized modification
- Denial of service attack (DoS)
- Take control of the system
- Bypass of a protection mechanism
Best practice and Recommendations:
The CERT team encourages users to review IBM security advisory and apply the necessary updates:
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-aspera-webapps-shares-faspex-console-orchestrator-and-products-are-affected-by-openssl-vulnerability-cve-id-cve-2019-1543/
- https://www.ibm.com/blogs/psirt/security-bulletin-aspera-web-faspex-application-is-affected-by-openssl-vulnerability-cve-2019-1552/
- https://www.ibm.com/blogs/psirt/security-bulletin-aspera-web-application-faspex-console-orchestrator-shares-are-affected-by-apache-vulnerabilities-cve-2019-9517-cve-2019-10097/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affects-websphere-application-server-january-2020-cpu-that-is-bundled-with-ibm-websphere-application-server-patterns/
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-ibm-cloud-object-storage-systems-february-2020v1/
- https://www.ibm.com/blogs/psirt/security-bulletin-aspera-web-applications-faspex-console-are-affected-by-apache-vulnerabilities-cve-2019-0196-cve-2019-0197-cve-2019-0215-cve-2019-0217-cve-2019-0220/
- https://www.ibm.com/blogs/psirt/security-bulletin-aspera-web-applications-faspex-console-shares-are-affected-by-apache-vulnerabilities-cve-2019-10081-cve-2019-10082-cve-2019-10092-cve-2019-10098/
- https://www.ibm.com/blogs/psirt/security-bulletin-aspera-web-shares-application-is-affected-by-nginx-vulnerabilities-cve-2018-16845-cve-2018-16843-cve-2019-7401/
Rate the content
Share the page
