Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (CVE-2018-1936, CVE-2019-4014)

Summary

IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (formerly IBM IoT Predictive Maintenance and Optimization). Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin.
(CVE-2018-1936, CVE-2019-4014)

Vulnerability Details

Refer to the security bulletins listed in the Remediation/Fixes section

Affected Products and Versions

IBM IoT Predictive Maintenance and Optimization 1.0.0 – 1.0.1

IBM Maximo APM - Predictive Maintenance Insights On-Premise 1.0.2

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by IBM DB2 which is shipped with Predictive Maintenance and Quality.

Principal Product and Version(s)

|

Affected Supporting Product and Version

|

Affected Supporting Product Security Bulletin

—|—|—

IBM IoT Predictive Maintenance and Optimization 1.0.0 – 1.0.1

IBM Maximo APM - Predictive Maintenance Insights On-Premise 1.0.2

|

IBM DB2 Enterprise Server Edition V10.5

|

Security Bulletin: IBM Db2 is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code (CVE-2018-1936).

Security Bulletin: IBM Db2 is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code (CVE-2019-4014).

Workarounds and Mitigations

None.