Security Bulletin: Public disclosed vulnerability from Nimbus-JOSE-JWT affects IBM Spectrum LSF

Summary Public disclosed vulnerability from Nimbus-JOSE-JWT affects IBM Spectrum LSF Vulnerability Details CVE-2017-16007 BDSA-2017-0101 Nimbus JOSE+JWT implemented the ECDH-ES encryption option of the 'JSON Web Encryption' standard in a way that is vulnerable to cryptanalysis. This would enable ...

Security Bulletin: Public disclosed vulnerabilities from Apache HttpComponents affects IBM Spectrum LSF

Summary Public disclosed vulnerabilities from Apache HttpComponents affects IBM Spectrum LSF: CVE-2012-6153, CVE-2014-3577 Vulnerability Details Brief Description: Apache HttpComponents CN spoofing CVE-ID: CVE-2012-6153 Description: Apache HttpComponents could allow a remote attacker to conduct...

Security Bulletin: Public disclosed vulnerability from Apache HttpComponents affects IBM Spectrum LSF

Summary Public disclosed vulnerability from Apache HttpComponents affects IBM Spectrum LSF: CVE-2011-1498 Vulnerability Details Apache HttpComponents Client CVE-2011-1498 Affected version: HttpClient 4.x before 4.1.1 Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an...

Security Bulletin: Public disclosed vulnerabilities from Jackson-databind affects IBM Spectrum LSF

Summary Public disclosed vulnerabilities from Jackson-databind affects IBM Spectrum LSF: CVE-2017-7525, CVE-2017-15095, CVE-2017-17485, CVE-2018-5968, CVE-2018-7489 Vulnerability Details CVE-2017-7525 Jackson-databind Also implemented in JBoss BPM Suite is vulnerable to remote code execution when...

Security Bulletin: Denial of Service vulnerability in Guava (CVE-2018-10237) affects IBM Spectrum LSF Application Center

Summary Denial of Service vulnerability in Guava CVE-2018-10237 affects IBM Spectrum LSF Application Center Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava AtomicDoubleArray and CompoundOrdering class denial of service CVSS Base Score: 7.5 CVSS Temporal Score: See...

Security Bulletin: Public disclosed vulnerability from Spring Framework affects IBM Spectrum LSF Explorer

Summary Public disclosed vulnerability from Spring Framework affects IBM Spectrum LSF Explorer Vulnerability Details CVE-ID:CVE-2018-15756 Description: Pivotal Spring Framework is vulnerable to a denial of service, caused by improper handling of range request by the ResourceHttpRequestHandler. By...

Security Bulletin: Public disclosed vulnerability from Spring Framework affects IBM Spectrum LSF Application Center

Summary Public disclosed vulnerability from Spring Framework affects IBM Spectrum LSF Application Center Vulnerability Details CVE-ID:CVE-2018-15756 Description: Pivotal Spring Framework is vulnerable to a denial of service, caused by improper handling of range request by the...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum LSF Process Manager

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum LSF Process Manager. IBM Spectrum LSF Process Manager has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum LSF Analytics

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Spectrum LSF Analytics. IBM Spectrum LSF Analytics has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you...

Security Bulletin: WAS traditional and liberty vulnerable to CVE-2014-7810 affects IBM Spectrum LSF Application Center

Summary WAS traditional and liberty vulnerable to CVE-2014-7810 affects IBM Spectrum LSF Application Center. Vulnerability Details CVEID: CVE-2014-7810 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the use of expression language. An attacker...

Security Bulletin: IBM Spectrum LSF is affected by a privilege escalation vulnerability

Summary IBM Spectrum LSF has addressed the following vulnerability. Enhancing the eauth executable file to prevent the preloading of getuid to avoid the users changing their job user at job submission time. Vulnerability Details CVEID:CVE-2018-1724 DESCRIPTION:IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3,...

Design/Logic Flaw

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

CVE-2018-1724

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

CVE-2018-1724

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

CVE-2018-1724

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

CVE-2018-1724

The CVE-2018-1724 issue affects IBM Spectrum LSF: versions 9.1.1, 9.1.2, 9.1.3, and 10.1. A local user could change their job user at submission due to improper file permission settings on the eauth mechanism. The reported root cause relates to the eauth executable’s permissions that enable user ...

CVE-2018-1724: Incorrect Permission Assignment for Critical Resource

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

Security Bulletin: WebSphere Liberty ORB client vulnerability affects IBM Spectrum LSF Application Center

Summary WebSphere Liberty ORB client vulnerability affects IBM Spectrum LSF Application Center Vulnerability Details CVEID: CVE-2018-1683 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the failure to encrypt ORB...

Security Bulletin: Public disclosed vulnerability from Apache Struts affects IBM Spectrum LSF Explorer

Summary Public disclosed vulnerability CVE-2018-11776 from Apache Struts affects IBM Spectrum LSF Explorer. Vulnerability Details CVEID: CVE-2018-11776 DESCRIPTION: Apache Struts namespace code execution CVSS Base Score: 9.8 CVSS Temporal Score: See for the current score CVSS Environmental Score:...

Security Bulletin: WebSphere Application Server LIBERTY is not honoring SSL transport in limited situations affects IBM Spectrum LSF Application Center

Summary WebSphere Application Server LIBERTY is not honoring SSL transport in limited situations, affects IBM Spectrum LSF Application Center. Vulnerability Details CVEID: CVE-2018-1755 DESCRIPTION: WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information...