Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBME75CBB7CFBC1B3A83749883DA9B07688107AC477333503C7735A34D91DB19608
HistorySep 08, 2021 - 7:35 p.m.

Security Bulletin: Security vulnerabilities have been identified in IBM® Java SDK that affect IBM Security Directory (CVE-2021-2161)

2021-09-0819:35:23
www.ibm.com
18

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

34.7%

JSON

Summary

Vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM Security Directory.

Vulnerability Details

CVEID:CVE-2021-2161
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact, high integrity impact, and no availability impact.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/200290 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
SDS 6.4.0

Remediation/Fixes

Product Remediation
IBM Security Directory 6.4.0
IBM Security Directory 6.4.0.24

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm security directory servereq6.4.0

Related

ibm 54
cnvd 1
veracode 1
prion 1
alpinelinux 1
f5 1
debian 2
cve 1
debiancve 1
redhatcve 1
ubuntucve 1
nessus 33
fedora 6
openvas 30
mageia 1
redhat 2
suse 9
kaspersky 1
rosalinux 1
gentoo 1
cloudlinux 1
altlinux 1
photon 1
oracle 1
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Java
2021-10-01 06:18:28
Security Bulletin: A Security Vulnerability Has Been Identified In IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Access Manager for e-business (CVE-2021-2161)
2021-05-24 14:37:59
Security Bulletin: Vulnerability in Java SE -CVE-2021-2161 may affect IBM Watson Assistant for IBM Cloud Pak for Data
2022-02-25 20:23:05
cnvd
cnvd
Oracle Java SE Embedded Input Validation Error Vulnerability
2021-02-03 00:00:00
veracode
veracode
Privilege Escalation
2021-07-16 12:12:36
prion
prion
Design/Logic Flaw
2021-04-22 22:15:00
alpinelinux
alpinelinux
CVE-2021-2161
2021-04-22 22:15:00
f5
f5
K25401610 : OpenJDK vulnerability CVE-2021-2161
2022-11-08 00:00:00
debian
debian
[SECURITY] [DSA 4899-1] openjdk-11 security update
2021-04-23 20:09:03
[SECURITY] [DLA 2634-1] openjdk-8 security update
2021-04-23 11:31:36
cve
cve
CVE-2021-2161
2021-04-22 22:15:00
debiancve
debiancve
CVE-2021-2161
2021-04-22 22:15:00
redhatcve
redhatcve
CVE-2021-2161
2021-04-20 20:45:01
ubuntucve
ubuntucve
CVE-2021-2161
2021-04-22 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2021:1554-1)
2021-05-12 00:00:00
IBM Java 7.0 < 7.0.10.85 / 7.1 < 7.1.4.85 / 8.0 < 8.0.6.30 / 11.0 < 11.0.11.0 Multiple Vulnerabilities
2022-04-29 00:00:00
Azul Zulu Java OpenJDK Vulnerability (2021-04-20)
2021-10-07 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: java-1.8.0-openjdk-1.8.0.292.b10-0.fc33
2021-04-29 19:05:32
[SECURITY] Fedora 34 Update: java-11-openjdk-11.0.11.0.9-0.fc34
2021-04-26 00:27:09
[SECURITY] Fedora 32 Update: java-11-openjdk-11.0.11.0.9-0.fc32
2021-05-01 01:31:17
openvas
openvas
Oracle OpenJDK Multiple Vulnerabilities (Apr 2021)
2021-05-31 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1989-1)
2021-06-18 00:00:00
Fedora: Security Advisory for java-1.8.0-openjdk (FEDORA-2021-8b80ef64f1)
2021-05-01 00:00:00
mageia
mageia
Updated java-openjdk packages fix security vulnerabilities
2021-06-29 01:51:23
redhat
redhat
(RHSA-2021:1445) Moderate: OpenJDK 8u292 Windows Builds release and security update
2021-04-28 12:29:21
(RHSA-2021:1447) Moderate: OpenJDK 11.0.11 Security Update for Windows Builds
2021-04-28 12:29:55
suse
suse
Security update for java-1_8_0-openjdk (moderate)
2021-07-11 00:00:00
Security update for java-1_8_0-openj9 (moderate)
2021-07-11 00:00:00
Security update for java-11-openjdk (important)
2021-05-14 00:00:00
kaspersky
kaspersky
KLA12159 Multiple vulnerabilities in Oracle Java SE
2021-04-20 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2133
2023-03-21 12:31:42
gentoo
gentoo
OpenJDK: Multiple Vulnerabilities
2022-09-07 00:00:00
cloudlinux
cloudlinux
Fixed 50 CVEs in java-1.7.0-openjdk
2022-08-22 13:56:04
altlinux
altlinux
Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.12.7-alt1_0jpp10
2021-08-25 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0413
2023-06-19 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

34.7%

JSON
Related for E75CBB7CFBC1B3A83749883DA9B07688107AC477333503C7735A34D91DB19608
ibm54cnvd1veracode1prion1alpinelinux1f51debian2cve1debiancve1redhatcve1ubuntucve1nessus33fedora6openvas30mageia1redhat2suse9kaspersky1rosalinux1gentoo1cloudlinux1altlinux1photon1oracle1