Security Bulletin: Vulnerabilities in OpenSSL affect IBM Service Delivery Manager

Summary OpenSSL vulnerabilities were disclosed on September 22, 2016 by the OpenSSL Project. OpenSSL is installed on the operating system shipped via IBM Service Delivery Manager. IBM Service Delivery Manager has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6303 DESCRIPTIO...

Security Bulletin: Multiple denial of service vulnerabilities with Expat may affect IBM HTTP Server shipped with IBM Service Delivery Manager (CVE-2012-0876, CVE-2012-1148, CVE-2016-4472 and CVE-2016-0718)

Summary IBM HTTP Server is shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting IBM HTTP Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2012-0876 DESCRIPTION: Expat is vulnerable to a denial of service,...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Service Delivery Manager (CVE-2016-2105, CVE-2016-2109, CVE-2016-2176)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is installed on the operating system shipped via IBM Service Delivery Manager. IBM Service Delivery Manager has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2105 DESCRIPTION:...

Security Bulletin: Multiple security vulnerabilities have been identified in WebSphere Application Server and IBM Tivoli Monitoring shipped with IBM Service Delivery Manager (CVE-2016-3426, CVE-2016-3427)

Summary WebSphere Application Server and IBM Tivoli Monitoring are shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-3426...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Service Delivery Manager (CVE-2016-3485)

Summary WebSphere Application Server is shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-3485 DESCRIPTION: An unspecified...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Service Delivery Manager (CVE-2016-0475, CVE-2016-0466, CVE-2015-7575 and CVE-2016-0448)

Summary WebSphere Application Server is shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Multiple...

Security Bulletin: Potential denial of service may affect IBM HTTP Server shipped with IBM Service Delivery Manager (CVE-2015-1829)

Summary IBM HTTP Server is shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting IBM HTTP Server has been published in a security bulletin. Vulnerability Details Review security bulletin Potential denial of service may affect IBM HTTP Server o...

Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with IBM Service Delivery Manager (CVE-2015-4872, CVE-2015-4734 and CVE-2015-5006)

Summary IBM WebSphere Application Server is shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Review security bulletin Multiple vulnerabilities i...

Security Bulletin: SSLv3 POODLE Attack (CVE-2014-3566)

Summary SSLv3 POODLE Attack CVE-2014-3566 impacts IBM Service Deliver Manager. Vulnerability Details Review the following security bulletins for vulnerability details and information about fixes: Security Bulletin: Vulnerability in SSLv3 affects IBM WebSphere Application Server CVE-2014-3566...

Security Bulletin: A security vulnerability has been identified in an IBM Tivoli Monitoring shared component and WebSphere Application Server which are both shipped with IBM Service Delivery Manager

Summary An IBM Tivoli Monitoring shared component and WebSphere Application Server are both included as part of IBM Service Delivery Manager. Information about a security vulnerability affecting an IBM Tivoli Monitoring shared component and WebSphere Application Server have been published in two...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Service Delivery Manager. OpenSSL is installed on the operating system shipped via IBM Service Delivery Manager

Summary OpenSSL contains vulnerabilities CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0205, CVE-2015-0206, CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0292, CVE-2015-0293. OpenSSL is installed on the...

Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server and Tivoli Directory Server shipped with IBM Service Delivery Manager (CVE-2015-0488, CVE-2015-0478, CVE-2015-0204 and CVE-2015-2808)

Summary WebSphere Application Server and Tivoli Directory Server are shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Server and Tivoli Directory Server has been published in this security bulletin. Vulnerability...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server, OpenSSL, HTTP server, IBM Tivoli Monitoring, SmartCloud Cost Management, Tivoli Directory Services shipped with IBM Service Delivery Manager (CVE-2014-3513, C

Summary WebSphere Application Server, OpenSSL, HTTP server, IBM Tivoli Monitoring, SmartCloud Cost Management, Tivoli Directory Services are shipped as a components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Services, HTTP server, I...

Security Bulletin: IBM Content Navigator is affected by a cross site scripting vulnerability

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1496 DESCRIPTION: IBM Content Navigator is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the glibc vulnerabilities (CVE-2015-7547)

Summary IBM Software Delivery and Lifecycle Patterns requires client action for the glibc vulnerabilities. The GNU C Library glibc is vulnerable to a heap-based buffer overflow, a local attacker could exploit this vulnerability to overflow a buffer and execute arbitrary code on the system with ro...

Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the Open Source libuser Vunlerabilities (CVE-2015-3245 and CVE-2015-3246)

Summary IBM Software Delivery and Lifecycle Patterns requires client action for the Open Source libuser Vunlerabilities. The libuser library implements a standardized interface for manipulating and administering user and group accounts, and is installed by default on Linux distributions derived...

Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the glibc vulnerabilities (CVE-2014-5119)

Summary IBM Software Delivery and Lifecycle Patterns requires client action for the glibc vulnerabilities. The GNU C Library glibc is vulnerable to a heap-based buffer overflow, a local attacker could exploit this vulnerability to overflow a buffer and execute arbitrary code on the system with ro...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Hypervisor Edition shipped with IBM Software Delivery and Lifecycle Patterns

Summary IBM WebSphere Application Server Hypervisor Edition is shipped as a component IBM Software Delivery and Lifecycle Patterns. Information about a security vulnerability in the IBM HTTP Server component of IBM WebSphere Application Server Hypervisor Edition has been published in a security...

Security Bulletin: A security vulnerability has been identified in IBM DB2 Hypervisor Edition shipped with IBM Software Delivery and Lifecycle Patterns

Summary IBM DB2 Hypervisor Edition is shipped as a component IBM Software Delivery and Lifecycle Patterns. Information about a security vulnerability in IBM DB2 Hypervisor Edition has been published in a security bulletin. Vulnerability Details Review Security Bulletin: IBM DB2 is impacted by...

Security Bulletin: Vulnerability in InstallAnywhere affects IBM InfoSphere Change Data Capture installers (CVE-2016-4560)

Summary InstallAnywhere generates installation executables on Microsoft Windows which are vulnerable to a DLL-planting exploit affecting the Change Data Capture CDC components within the IBM InfoSphere Data Replication and IBM InfoSphere Change Data Delivery families of products. Vulnerability...