Security Bulletin: IBM Resilient SOAR is Using Components with Known Vulnerabilities - Java SE (CVE-2020-14781)

Summary

IBM Resilient SOAR is Using Components with Known Vulnerabilities - Java SE (CVE-2020-14781)

Vulnerability Details

CVEID:CVE-2020-14781
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact using unknown attack vectors.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/190099 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

Users must upgrade to v41.0 of IBM Security SOAR (previously known as IBM Resilient) in order to obtain a fix for this vulnerability. This upgrades the version of IBM Java SDK to 8.0 Service Refresh 6 Fix Pack 26.

You can upgrade the platform by following the instructions in the “Upgrade Procedure” section in the IBM Resilient Security Orchestration, Automation and Response Platform documentation.

Workarounds and Mitigations

None