Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise

Summary

IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (formerly IBM IoT Predictive Maintenance and Optimization). Information about some security vulnerabilities affecting IBM DB2 has been published in their respective security bulletins.
(CVE-2018-1980 CVE-2018-1922 CVE-2018-1923 CVE-2018-1978 CVE-2019-4016 CVE-2019-4015)

Vulnerability Details

Refer to the security bulletins listed in the Remediation/Fixes section

Affected Products and Versions

IBM IoT Predictive Maintenance and Optimization 1.0.0 – 1.0.1

IBM Maximo APM - Predictive Maintenance Insights On-Premise 1.0.2

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by IBM DB2 which is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premises.

Principal Product and Version(s)

|

Affected Supporting Product and Version

|

Affected Supporting Product Security Bulletin

—|—|—

IBM IoT Predictive Maintenance and Optimization 1.0.0 – 1.0.1

IBM Maximo APM - Predictive Maintenance Insights On-Premise 1.0.2

|

IBM DB2 Enterprise Server Edition V10.5

|

Security Bulletin: Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2018-1922, CVE-2018-1923, CVE-2018-1978, CVE-2018-1980, CVE-2019-4015, CVE-2019-4016).

Workarounds and Mitigations

None.