Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM151664D44B7940A78C0F29EC88272FD346BD06DCBAFEA5C9CAD32616E0EB8352
HistoryOct 14, 2020 - 3:50 a.m.

Security Bulletin: Multiple vulnerabilities in IBM® JDK, Java™ Technology Edition may affect IBM Cloud Manager with OpenStack

2020-10-1403:50:30
www.ibm.com
10
ibm cloud manager
java technology edition
vulnerabilities
openstack
security bulletin

EPSS

0.001

Percentile

34.4%

JSON

Summary

A vulnerability in IBM® JDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Manager with OpenStack. The CVE-2020-2590 and CVE-2020-2601 were disclosed as part of the Oracle January 2020 Critical Patch Update.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
IBM Cloud Manager 4.3

Remediation/Fixes

The recommended solution is to manually apply the fix on IBM Cloud Manager with OpenStack.

Consult the following security bulletins for the vulnerability details and information about their fixes:

Security Bulletin: CVE-2020-2590 may affect IBM® SDK, Java™ Technology Edition

Security Bulletin: CVE-2020-2601 may affect IBM® SDK, Java™ Technology Edition

Workarounds and Mitigations

None

Related

ibm 71
nvd 2
osv 5
cvelist 2
cve 2
redhatcve 2
ubuntucve 2
prion 2
debiancve 2
veracode 2
alpinelinux 2
vulnrichment 2
symantec 2
openvas 22
nessus 48
redhat 9
debian 3
mageia 1
centos 5
amazon 3
suse 2
oraclelinux 7
ubuntu 1
ibm
ibm
Security Bulletin: Multiple security vulnerabilities in IBM® Java SDK July 2020 CPU plus CVE-2020-2590 and CVE-2020-2601 have been identified in Jazz Team Server shipped with Jazz Reporting Service
2020-09-25 19:32:25
Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Security Identity Manager July 2020 CPU plus deferred CVE-2020-2590 and CVE-2020-2601
2020-08-13 19:38:43
Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition may affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise
2020-09-29 10:09:38
nvd
nvd
CVE-2020-2590
2020-01-15 17:15:19
CVE-2020-2601
2020-01-15 17:15:20
osv
osv
CVE-2020-2590
2020-01-15 17:15:19
CVE-2020-2601
2020-01-15 17:15:20
openjdk-11 - security update
2020-01-19 00:00:00
cvelist
cvelist
CVE-2020-2590
2020-01-15 16:34:02
CVE-2020-2601
2020-01-15 16:34:02
cve
cve
CVE-2020-2590
2020-01-15 17:15:19
CVE-2020-2601
2020-01-15 17:15:20
redhatcve
redhatcve
CVE-2020-2590
2020-01-15 11:39:19
CVE-2020-2601
2021-06-06 15:43:20
ubuntucve
ubuntucve
CVE-2020-2590
2020-01-15 00:00:00
CVE-2020-2601
2020-01-15 00:00:00
prion
prion
Design/Logic Flaw
2020-01-15 17:15:00
Design/Logic Flaw
2020-01-15 17:15:00
debiancve
debiancve
CVE-2020-2590
2020-01-15 17:15:19
CVE-2020-2601
2020-01-15 17:15:20
veracode
veracode
Authorization Bypass
2020-01-17 01:47:10
Information Disclosure
2020-01-17 01:47:10
alpinelinux
alpinelinux
CVE-2020-2590
2020-01-15 17:15:19
CVE-2020-2601
2020-01-15 17:15:20
vulnrichment
vulnrichment
CVE-2020-2590
2020-01-15 16:34:02
CVE-2020-2601
2020-01-15 16:34:02
symantec
symantec
Oracle Java SE/Java SE Embedded CVE-2020-2590 Remote Security Vulnerability
2020-01-14 00:00:00
Oracle Java SE/Java SE Embedded CVE-2020-2601 Remote Security Vulnerability
2020-01-14 00:00:00
openvas
openvas
Oracle Java SE Security Update (cpujan2020 - 01) - Windows
2020-01-16 00:00:00
Oracle Java SE Security Update (cpujan2020 - 01) - Linux
2020-01-16 00:00:00
CentOS: Security Advisory for java (CESA-2020:0632)
2020-02-28 00:00:00
nessus
nessus
Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20200227)
2020-02-28 00:00:00
Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-0202)
2020-01-23 00:00:00
Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20200121)
2020-01-22 00:00:00
redhat
redhat
(RHSA-2020:0202) Important: java-1.8.0-openjdk security update
2020-01-22 12:27:33
(RHSA-2020:0122) Important: java-11-openjdk security update
2020-01-16 10:46:10
(RHSA-2020:0157) Important: java-1.8.0-openjdk security update
2020-01-20 11:34:29
debian
debian
[SECURITY] [DSA 4605-1] openjdk-11 security update
2020-01-19 21:52:05
[SECURITY] [DSA 4621-1] openjdk-8 security update
2020-02-12 22:14:32
[SECURITY] [DLA 2128-1] openjdk-7 security update
2020-02-29 12:18:39
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerabilities
2020-01-30 21:28:34
centos
centos
java security update
2020-01-18 14:53:03
java security update
2020-02-27 22:12:52
java security update
2020-02-18 22:20:02
amazon
amazon
Important: java-1.7.0-openjdk
2020-03-16 20:58:00
Important: java-1.8.0-openjdk
2020-02-17 19:51:00
Important: java-1.8.0-openjdk
2020-02-20 01:00:00
suse
suse
Security update for java-1_8_0-openjdk (important)
2020-01-29 00:00:00
Security update for java-11-openjdk (important)
2020-01-28 00:00:00
oraclelinux
oraclelinux
java-11-openjdk security update
2020-01-16 00:00:00
java-11-openjdk security update
2020-01-20 00:00:00
java-1.7.0-openjdk security update
2020-02-27 00:00:00
ubuntu
ubuntu
OpenJDK vulnerabilities
2020-01-28 00:00:00

EPSS

0.001

Percentile

34.4%

JSON
Related for 151664D44B7940A78C0F29EC88272FD346BD06DCBAFEA5C9CAD32616E0EB8352
ibm71nvd2osv5cvelist2cve2redhatcve2ubuntucve2prion2debiancve2veracode2alpinelinux2vulnrichment2symantec2openvas22nessus48redhat9debian3mageia1centos5amazon3suse2oraclelinux7ubuntu1