Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System

Summary

RedHat provided BIND package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2018-5741
**DESCRIPTION:**ISC BIND could allow a remote authenticated attacker to bypass security restrictions, caused by an error in the documentation of the ‘update-policy’ feature for the ‘krb5-subdomain’ and ‘ms-subdomain’ update policies. An attacker could exploit this vulnerability to modify records in the zone at or below the name specified in the name field.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/150171 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)

Affected Products and Versions

Remediation/Fixes

Update to the following IBM Integrated Analytics System release :

Workarounds and Mitigations

None