IBMEABCB62F4F89C79FF87C8CD548FFD288BDE7C18AAF07A286BBD0C9C83EF3983DSecurity Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM® SDK, Java™ Technology Edition are affected by multiple vulnerabilities (CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619)
Summary
This covers all applicable Java SE CVEs published by Oracle as part of their October 2022 Critical Patch Update. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: Jazz Foundation, IBM Engineering Lifecycle Optimization - Engineering Insights, IBM Engineering Lifecycle Optimization - Publishing, IBM Engineering Requirements Management DOORS Next, Global Configuration Management, IBM Engineering Workflow Management, IBM Jazz Reporting Service, IBM Engineering Test Management
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Version(s) | Affected Product(s) |
|---|---|
| All | Global Configuration Management |
| IBM Jazz Reporting Service | |
| 6.0.6, 6.0.6.1 | Collaborative Lifecycle Management |
| Rational Publishing Engine | |
| Rational Team Concert | |
| IBM Jazz Reporting Service | |
| Rational Engineering Lifecycle Manager | |
| Rational DOORS Next Generation | |
| Rational Quality Manager | |
| 7, 7.0.1, 7.0.2 | Engineering Lifecycle Management |
| IBM Engineering Lifecycle Optimization - Publishing | |
| IBM Engineering Workflow Management | |
| IBM Jazz Reporting Service | |
| IBM Engineering Lifecycle Optimization - Engineering Insights | |
| IBM Engineering Requirements Management DOORS Next | |
| IBM Engineering Test Management |
Remediation/Fixes
This vulnerability affects multiple IBM® Engineering Lifecycle Engineering products mentioned above, which uses IBM® SDK, Java™ Technology Edition.
If the Product is deployed on one of the above versions, Please follow the instruction given in the following article
Link - <https://www.ibm.com/support/pages/node/6839127>
Workarounds and Mitigations
None
Related
