Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMB2EAB78FADD2A38E2416DBE38509D0A0612D4D7D3AF68924D1886EE5C5C022AF
HistoryJun 23, 2021 - 1:24 p.m.

Security Bulletin: Vulnerability in IBM Java Runtime affect IBM Cloud Transformation Advisor

2021-06-2313:24:32
www.ibm.com
8

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

34.7%

JSON

Summary

There is a vulnerability in IBM® Runtime Environment Java™ Version 8.0.6.25 used by IBM Cloud Transformation Advisor. IBM Cloud Transformation Advisor has addressed the applicable CVE. This issue was disclosed as part of the IBM Java SDK update.

Vulnerability Details

CVEID:CVE-2021-2161
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact, high integrity impact, and no availability impact.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/200290 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Cloud Transformation Advisor 2.4.2, 2.4.3

Remediation/Fixes

Upgrade to 2.4.4 or later.

IBM Cloud Transformation Advisor can be installed from OperatorHub page in Red Hat OpenShift Container Platform or locally following this link.

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm cloud transformation advisoreq2.0

Related

ibm 54
cvelist 1
cnvd 1
veracode 1
f5 1
debian 2
cve 1
redhatcve 1
ubuntucve 1
debiancve 1
alpinelinux 1
prion 1
nessus 33
openvas 30
mageia 1
fedora 6
suse 9
kaspersky 1
redhat 2
rosalinux 1
redos 1
gentoo 1
cloudlinux 1
altlinux 1
photon 1
oracle 1
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Java
2021-10-01 06:18:28
Security Bulletin: Vulnerability in Java SE -CVE-2021-2161 may affect IBM Watson Assistant for IBM Cloud Pak for Data
2022-02-25 20:23:05
Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Java version used in it.(CVE-2021-2161)
2022-01-17 19:30:16
cvelist
cvelist
CVE-2021-2161
2021-04-22 21:53:46
cnvd
cnvd
Oracle Java SE Embedded Input Validation Error Vulnerability
2021-02-03 00:00:00
veracode
veracode
Privilege Escalation
2021-07-16 12:12:36
f5
f5
K25401610 : OpenJDK vulnerability CVE-2021-2161
2022-11-08 00:00:00
debian
debian
[SECURITY] [DSA 4899-1] openjdk-11 security update
2021-04-23 20:09:03
[SECURITY] [DLA 2634-1] openjdk-8 security update
2021-04-23 11:31:36
cve
cve
CVE-2021-2161
2021-04-22 22:15:00
redhatcve
redhatcve
CVE-2021-2161
2021-04-20 20:45:01
ubuntucve
ubuntucve
CVE-2021-2161
2021-04-22 00:00:00
debiancve
debiancve
CVE-2021-2161
2021-04-22 22:15:00
alpinelinux
alpinelinux
CVE-2021-2161
2021-04-22 22:15:00
prion
prion
Design/Logic Flaw
2021-04-22 22:15:00
nessus
nessus
Amazon Corretto Java 16.x < 16.0.1.9.1 Multiple Vulnerabilities
2022-04-01 00:00:00
openSUSE Security Update : java-11-openjdk (openSUSE-2021-719)
2021-05-18 00:00:00
Oracle Java SE 1.7.0_301 / 1.8.0_291 / 1.11.0_11 / 1.16.0_1 Multiple Vulnerabilities (Unix Apr 2021 CPU)
2021-04-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:1989-1)
2021-06-18 00:00:00
openSUSE: Security Advisory for java-1_8_0-openj9 (openSUSE-SU-2021:1666-1)
2021-07-13 00:00:00
Fedora: Security Advisory for java-1.8.0-openjdk (FEDORA-2021-8b80ef64f1)
2021-05-01 00:00:00
mageia
mageia
Updated java-openjdk packages fix security vulnerabilities
2021-06-29 01:51:23
fedora
fedora
[SECURITY] Fedora 33 Update: java-1.8.0-openjdk-1.8.0.292.b10-0.fc33
2021-04-29 19:05:32
[SECURITY] Fedora 33 Update: java-11-openjdk-11.0.11.0.9-0.fc33
2021-04-24 18:07:10
[SECURITY] Fedora 32 Update: java-1.8.0-openjdk-1.8.0.292.b10-0.fc32
2021-04-30 01:07:06
suse
suse
Security update for java-1_8_0-openjdk (moderate)
2021-06-28 00:00:00
Security update for java-1_8_0-openj9 (moderate)
2021-05-23 00:00:00
Security update for java-11-openjdk (important)
2021-05-14 00:00:00
kaspersky
kaspersky
KLA12159 Multiple vulnerabilities in Oracle Java SE
2021-04-20 00:00:00
redhat
redhat
(RHSA-2021:1447) Moderate: OpenJDK 11.0.11 Security Update for Windows Builds
2021-04-28 12:29:55
(RHSA-2021:1445) Moderate: OpenJDK 8u292 Windows Builds release and security update
2021-04-28 12:29:21
rosalinux
rosalinux
Advisory ROSA-SA-2023-2133
2023-03-21 12:31:42
redos
redos
ROS-20240424-01
2024-04-24 00:00:00
gentoo
gentoo
OpenJDK: Multiple Vulnerabilities
2022-09-07 00:00:00
cloudlinux
cloudlinux
Fixed 50 CVEs in java-1.7.0-openjdk
2022-08-22 13:56:04
altlinux
altlinux
Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.12.7-alt1_0jpp10
2021-08-25 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0413
2023-06-19 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

34.7%

JSON
Related for B2EAB78FADD2A38E2416DBE38509D0A0612D4D7D3AF68924D1886EE5C5C022AF
ibm54cvelist1cnvd1veracode1f51debian2cve1redhatcve1ubuntucve1debiancve1alpinelinux1prion1nessus33openvas30mageia1fedora6suse9kaspersky1redhat2rosalinux1redos1gentoo1cloudlinux1altlinux1photon1oracle1