Lucene search

K
ibmIBM5779FAFCAB6647BCE354D834C1B6C66B9897E3B10C406088662C86208F26D438
HistoryAug 26, 2021 - 7:54 p.m.

Security Bulletin: IBM Db2 Query Monitor fix for potential JSSE vulnerability. PSIRT 255377

2021-08-2619:54:18
www.ibm.com
11

0.001 Low

EPSS

Percentile

47.4%

Summary

PROBLEM DESCRIPTION: Potential vulnerability in JSSEcomponent.

Vulnerability Details

CVEID:CVE-2020-14781
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact using unknown attack vectors.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/190099 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
Db2 Query Monitor for z/OS 3.3.0

Remediation/Fixes

PH34668

See details:

<https://www.ibm.com/support/pages/node/6476344&gt;

Workarounds and Mitigations

None

CPENameOperatorVersion
db2 query monitor for z/oseq3.3