com.netflix.conductor:conductor-contribs (1.12.4-rc2), com.netflix.conductor:conductor-es2-persistence (1.12.4-rc2) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.12.4-rc2)

com.netflix.conductor:conductor-core MAVEN version 1.12.4-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.12.4-rc2 -...

com.netflix.conductor:conductor-contribs (1.12.6), com.netflix.conductor:conductor-es2-persistence (1.12.6) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.12.6)

com.netflix.conductor:conductor-core MAVEN version 1.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.12.6 -...

com.netflix.conductor:conductor-contribs (1.12.7-beta), com.netflix.conductor:conductor-es2-persistence (1.12.7-beta) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.12.7-beta)

com.netflix.conductor:conductor-core MAVEN version 1.12.7-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.12.7-beta -...

com.netflix.conductor:conductor-contribs (1.12.8), com.netflix.conductor:conductor-es2-persistence (1.12.8) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.12.8)

com.netflix.conductor:conductor-core MAVEN version 1.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.12.8 -...

com.netflix.conductor:conductor-contribs (1.12.9), com.netflix.conductor:conductor-es2-persistence (1.12.9) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.12.9)

com.netflix.conductor:conductor-core MAVEN version 1.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.12.9 -...

com.netflix.conductor:conductor-contribs (1.12.11), com.netflix.conductor:conductor-es2-persistence (1.12.11) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.12.11)

com.netflix.conductor:conductor-core MAVEN version 1.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.12.11 -...

com.netflix.conductor:conductor-contribs (1.12.13), com.netflix.conductor:conductor-es2-persistence (1.12.13) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.12.13)

com.netflix.conductor:conductor-core MAVEN version 1.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.12.13 -...

com.netflix.conductor:conductor-contribs (1.11.2), com.netflix.conductor:conductor-es2-persistence (1.11.2) +4 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (1.11.2)

com.netflix.conductor:conductor-core MAVEN version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.conductor:conductor-core and may be impacted: - com.netflix.conductor:conductor-contribs 1.11.2 -...

Security Bulletin: Due to the use of Apache Log4j, IBM Spectrum Conductor is vulnerable to arbitrary code execution (CVE-2021-44832 and CVE-2021-45046) and denial of service (CVE-2021-45105)

Summary Apache Log4j is used by IBM Spectrum Conductor for generating logs in some of its components such as ELK, ascd, GUI and so on. This bulletin provides interim fixes which include Apache Log4j 2.17.1 to fix arbitrary code execution CVE-2021-44832 and CVE-2021-45046 and denial of service...

Security Bulletin: Vulnerability in Apache Log4j addressed in IBM Spectrum Conductor

Summary Log4j is used by IBM Spectrum Conductor for generating logs in some of its components. This bulletin provides patches for the Log4Shell vulnaribility CVE-2021-44228 to IBM Spectrum Conductor. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attack...

Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-44228) impacts IBM Watson Machine Learning Accelerator

Summary Log4j is used by IBM Watson Machine Learning Accelerator for generating logs in some of its components. This bulletin provides mitigations for the Log4j vulnerability CVE-2021-44228 by applying workaround steps to IBM Watson Machine Learning Accelerator. Vulnerability Details Refer to the...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Conductor

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ versions 8 Service Refresh 5 Fix Pack 17 used by IBM Spectrum Conductor with Spark 2.2.0, 2.2.1 and IBM Spectrum Conductor 2.3.0. IBM Spectrum Conductor has addressed the applicable CVEs. Vulnerability Details If you run...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Conductor with Spark

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ versions, specifically Version 8 Service Refresh 5 Fix Pack 10 and earlier releases used by IBM Spectrum Conductor with Spark 2.2.0 and 2.2.1. These issues were disclosed as part of the IBM Java SDK updates in April 2018...

Security Bulletin: Multiple vulnerability issues affect IBM Spectrum Conductor 2.5.0

Summary This interim fix provides instructions on upgrading third parity libraries in IBM Spectrum Conductor 2.5.0 in order to address security vulnerabilities CVE-2015-9251, CVE-2019-11358, CVE-2020-11022, CVE-2020-11023, CVE-2019-17359, CVE-2019-8331, CVE-2018-1000632, CVE-2018-10237,...

Security Bulletin: A vulnerability in IBM Java Runtime affect IBM Spectrum Conductor and IBM Spectrum Conductor with Spark

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum Conductor 2.5.0, IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3.0, and IBM Spectrum Conductor with Spark 2.2.1. IBM Spectrum Conductor 2.5.0, IBM Spectrum...

Security Bulletin: A vulnerability in IBM Java Runtime affect IBM Spectrum Conductor and IBM Spectrum Conductor with Spark

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3.0, and IBM Spectrum Conductor with Spark 2.2.1. IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum...

Security Bulletin: A vulnerability in IBM Java Runtime affect IBM Spectrum Conductor and IBM Spectrum Conductor with Spark

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3.0, and IBM Spectrum Conductor with Spark 2.2.1. IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Conductor and IBM Spectrum Conductor with Spark

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3.0, and IBM Spectrum Conductor with Spark 2.2.1. IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM...

Security Bulletin: A vulnerability in OpenJDK Java Runtime Environment (JRE) affect IBM Spectrum Conductor 2.4.1

Summary There is a vulnerability in OpenJDK Java Runtime Environment JRE used by IBM Spectrum Conductor 2.4.1. IBM Spectrum Conductor 2.4.1 has addressed the applicable vulnerability. Vulnerability Details Third Party Entry: 185972 DESCRIPTION: Oracle JDK and OpenJDK JavaFX code execution CVSS Ba...

com.netflix.conductor:conductor-contribs (>=0.0.4, <=1.12.13), com.netflix.conductor:conductor-es2-persistence (>=1.10.0, <=1.12.13) +5 more potentially affected by CVE-2020-9296 via com.netflix.conductor:conductor-core (>=0.0.4, <=1.12.13)

com.netflix.conductor:conductor-core MAVEN version =0.0.4, =0.0.4, =1.10.0, =1.7.7, =0.0.4, =1.8.2-rc3, =0.0.4, =1.6.0, =1.8.0-alpha-1 Source cves: CVE-2020-9296 Source advisory: MEND:CVE-2020-9296...