Lucene search

IBMB362BE3430A7D78E8D2EA9B2DCEA34E0067B1329385BFB956AFB696FAFC68FAD

HistorySep 13, 2022 - 12:58 p.m.

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2021-35561)

2022-09-1312:58:26

www.ibm.com

ibm tivoli system automation application manager

ibm sdk java technology edition

cve-2021-35561

vulnerabilities

ibm tivoli system automation application manager 4.1

remediation

download link

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.003

Percentile

70.4%

JSON

Summary

There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Tivoli System Automation Application Manager	4.1

Remediation/Fixes

The recommended solution is to apply the corresponding fix to IBM Tivoli System Automation Application Manager. To select the fix you need to apply in your environment, click on ‘Download link’ in the table below.

If you are running IBM Tivoli System Automation Application Manager 4.1.0.2, please apply interim fix “4.1.0.2-TIV-SAAMR-<OS>-IF0012” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.2.
If you are running IBM Tivoli System Automation Application Manager 4.1.0.3, please apply interim fix “4.1.0.3-TIV-SAAMR-<OS>-IF0008” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.3.
If you are running IBM Tivoli System Automation Application Manager 4.1.0.4, please apply interim fix “4.1.0.4-TIV-SAAMR-<OS>-IF0005” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.4.
If you are running IBM Tivoli System Automation Application Manager 4.1.0.5, please apply interim fix “4.1.0.5-TIV-SAAMR-<OS>-IF0003” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.5.
Product| VRMF| APAR
—|—|—
IBM Tivoli System Automation Application Manager| 4.1| Download Link

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_system_automation_application_managerMatch4.1

VendorProductVersionCPE
ibmtivoli_system_automation_application_manager4.1cpe:2.3:a:ibm:tivoli_system_automation_application_manager:4.1:*:*:*:*:*:*:*