Lucene search

K
ibmIBM84B9767DD7A78C0C9B3DE5B3A8C3B40CEF4B6327D1D273F478B76F150BC36FAF
HistoryNov 27, 2020 - 10:46 a.m.

Security Bulletin: A vulnerability in IBM Java Runtime affects TXSeries for Multiplatforms

2020-11-2710:46:02
www.ibm.com
3

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

Summary

TXSeries for Multiplatforms has addressed the following vulnerability reported by IBM® Runtime Environment Java™

Vulnerability Details

CVEID:CVE-2020-2601
**DESCRIPTION:**An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Security component could allow an unauthenticated attacker to obtain sensitive information resulting in a high confidentiality impact using unknown attack vectors.
CVSS Base score: 6.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174548 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM TXSeries for Multiplatforms 8.2.0.0 - 8.2.0.2
IBM TXSeries for Multiplatforms 9.1.0.0 - 9.1.0.1

Remediation/Fixes

Product Version Defect Remediation / First Fix
IBM TXSeries for Multiplatforms v9.1

9.1.0.0

9.1.0.1

| 126492| Fix Central Link
IBM TXSeries for Multiplatforms v8.2|

8.2.0.0

8.2.0.1

8.2.0.2

| 126492| Fix Central Link

Workarounds and Mitigations

None

CPENameOperatorVersion
txseries for multiplatformseqany

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

Related for 84B9767DD7A78C0C9B3DE5B3A8C3B40CEF4B6327D1D273F478B76F150BC36FAF