There is an unspecified vulnerability (CVE-2019-2949) in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3.0, and IBM Spectrum Conductor with Spark 2.2.1. IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3, and IBM Spectrum Conductor with Spark 2.2.1 have addressed the applicable CVE.
CVEID:CVE-2019-2949
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Kerberos component could allow an unauthenticated attacker to obtain sensitive information resulting in a high confidentiality impact using unknown attack vectors.
CVSS Base score: 6.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/169254 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Affected Product(s) | Version(s) |
---|---|
IBM Spectrum Conductor | 2.2.1 |
IBM Spectrum Conductor | 2.4 |
IBM Spectrum Conductor | 2.4.1 |
IBM Spectrum Conductor | 2.3 |
Product(s) | Version(s) | APAR | Remediation/Fixes |
---|---|---|---|
IBM Spectrum Conductor with Spark | 2.2.1 | None | cws-2.2.1-build548899 |
IBM Spectrum Conductor | 2.3.0 | None | sc-2.3-build548884 |
IBM Spectrum Conductor | 2.4.0 | None | sc-2.4-build548883 |
IBM Spectrum Conductor | 2.4.1 | None | sc-2.4.1-build548881 |
None