Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMF34133DBAC4F6FEF866DB845BED95244FB18E8AD56C9EDC4C9EFFFDFD49046C8
HistoryApr 06, 2021 - 11:03 p.m.

Security Bulletin: Multiple Vulnerabilities in Windows Server supporting products bundled with Cloud Pak Systems

2021-04-0623:03:35
www.ibm.com
9

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON

Summary

Multiple Vulnerabilities identified in MS Windows Server platforms. Information about vulnerabilities has been published in the provider security update guide.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Main Product version (s) Affected Supporting Product Version(s)
IBM Cloud Pak System V2.3 Microsoft Windows Server 2012 Microsoft Windows Server 2016 Microsoft Windows Server 2019

Remediation/Fixes

Information about vulnerabilities in MS Windows Server platforms has been published in the provider security updates. If you are running specific configurations, recommendation is to review your environment. Consult Security Update Guide to search for available patches corresponding to the platform in use in your environment, see MS Security TechCenter - December 2020.

Workarounds and Mitigations

none

CPENameOperatorVersion
ibm cloud pak systemeq2.3

Related

mscve 1
cve 1
ubuntucve 1
prion 1
nessus 6
thn 1
mskb 9
kaspersky 1
rapid7blog 1
mscve
mscve
Kerberos Security Feature Bypass Vulnerability
2020-12-08 08:00:00
cve
cve
CVE-2020-16996
2020-12-10 00:15:00
ubuntucve
ubuntucve
CVE-2020-16996
2020-12-10 00:00:00
prion
prion
Security feature bypass
2020-12-10 00:15:00
nessus
nessus
KB4592495: Windows 8.1 and Windows Server 2012 R2 December 2020 Security Update
2020-12-08 00:00:00
KB4592497: Windows Server 2012 December 2020 Security Update
2020-12-08 00:00:00
KB4593226: Windows 10 Version 1607 and Windows Server 2016 December 2020 Security Update
2020-12-08 00:00:00
thn
thn
Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws
2020-12-09 04:57:00
mskb
mskb
December 8, 2020—KB4592449 (OS Builds 18362.1256 and 18363.1256) - EXPIRED
2020-12-08 08:00:00
March 9, 2021—KB5000840 (Security-only update)
2021-03-09 08:00:00
March 9, 2021—KB5000848 (Monthly Rollup)
2021-03-09 08:00:00
kaspersky
kaspersky
KLA12024 Multiple vulnerabilities in Microsoft Windows
2020-12-08 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - December 2020
2020-12-08 21:36:27

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON
Related for F34133DBAC4F6FEF866DB845BED95244FB18E8AD56C9EDC4C9EFFFDFD49046C8
mscve1cve1ubuntucve1prion1nessus6thn1mskb9kaspersky1rapid7blog1