Lucene search

K
ibmIBM6BFC2C71A9A22BAF8C951EE579AAF489494ECD085E0977EEDA196AB4922E464A
HistoryApr 27, 2023 - 5:18 p.m.

Security Bulletin: CVE-2022-21541, CVE-2022-21540 may affect TXSeries for Multiplatforms on HP platform.

2023-04-2717:18:09
www.ibm.com
23
cve-2022-21541
txseries
multiplatforms
hp
java
security bulletin
ibm
vulnerability

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

49.8%

Summary

Multiple CVEs - CVE-2022-21541, CVE-2022-21540 may affect IBM Java used by TXSeries for Multiplatforms on HP platform. TXSeries for Multiplatforms has addressed the applicable CVEs. Updated Java is provided as special fix and fix is uploaded to Fix Central.

Vulnerability Details

CVEID:CVE-2022-21541
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the VM component could allow an unauthenticated attacker to cause no confidentiality impact, high integrity impact, and no availability impact.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/231568 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

CVEID:CVE-2022-21540
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the VM component could allow an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/231567 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM TXSeries for Multiplatforms 8.2

Remediation/Fixes

Product Version Platform Remediation / Fix
IBM TXSeries for Multiplatforms

8.2

| HP| Fix Central Link

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmtxseries_for_multiplatformsMatch8.2
CPENameOperatorVersion
txseries for multiplatformseq8.2

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

49.8%