Security Bulletin: Vulnerability in urllib3 might affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2023-43804, CVE-2023-45803)

Summary Vulnerabilities in urllib3 might affect IBM Spectrum Sentinel Anomaly Scan Engine. Vulnerabilities include allowing remote attacker to obtain sensitive information to launch further attacks against the affected system. Vulnerability Details CVEID:CVE-2023-43804 DESCRIPTION: urllib3 could...

Security Bulletin: WebSphere Application Server Liberty is vulnerable to denial of service (CVE-2023-38737)

Summary IBM Spectrum Protect for Workstations Central Administration Console requires the dependent product IBM WebSphere Application Server Liberty. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. Refer to t...

CVE-2022-43843

IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 239080...

CVE-2022-43843

IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 239080...

Code injection

IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 239080...

CVE-2022-43843 IBM Spectrum Scale information disclosure

IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 239080...

CVE-2022-43843

IBM Spectrum Scale Data Access Services (DAS) is affected by CVE-2022-43843 due to the use of weaker-than-expected cryptographic algorithms in TLS, potentially allowing decryption of highly sensitive information. Affected product: IBM Spectrum Scale, versions 5.1.5.0 through 5.1.5.1. Root cause: ...

IBM Spectrum Scale 加密问题漏洞

IBM Spectrum Scale is a suite of scalable data and file management solutions from International Business Machines IBM based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improvin...

Security Bulletin: Multiple vulnerabilities have been identified in Golang Go used with IBM Storage Scale Data Access Services (DAS) which can cause denial of service.

Summary Multiple security vulnerabilities have been identified in Golang Go used with IBM Storage Scale Data Access Services DAS which can cause denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2023-39325 DESCRIPTION: Golang Go is vulnerable to a denia...

Security Bulletin: Multiple vulnerabilities in IBM Storage Scale Container Native could allow access to container outside the current namespace

Summary Multipe security vulnerabilities have been identified in IBM Storage Scale Container Native that could allow access to container outside the current namespace. A fix for these vulnerabilities is available. Vulnerability Details CVEID:CVE-2022-41738 DESCRIPTION: IBM Spectrum Scale could...

Security Bulletin: Vulnerabilities in IBM Java affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition affects the product's management GUI. The Command Line Interface is unaffected. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition...

Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to OpenSSL

Summary Vulnerabilities in OpenSSL such as remote attacker bypass security restrictions, denial of service may affect IBM Spectrum Control. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-0466 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security...

Security Bulletin: IBM Spectrum Control is vulnerable weaknesses related to IBM WebSphere Application Server Liberty

Summary Vulnerabilities in IBM WebSphere Application Server Liberty such as denial of service may affect IBM Spectrum Control. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-38737 DESCRIPTION: IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is...

Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js

Summary Vulnerabilities in Node.js such as remote attacker to bypass security restrictions, denial of service, may affect IBM Spectrum Control. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-39333 DESCRIPTION: Node.js could allow a remote attacker to gain...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale Data Access Services (DAS) where insecure communication in TLS connections is used. (CVE-2022-43843)

Summary A security vulnerability has been identified in IBM Spectrum Scale Data Access Services DAS where insecure communication in TLS connections is used. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-43843 DESCRIPTION: IBM Spectrum Scale uses weaker than...

Security Bulletin: crypto-js affects IBM Spectrum Control [CVE-2023-46233]

Summary crypto-js is vulnerable to a remote attacker to obtain sensitive information. This vulnerability affects IBM Spectrum Control. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-46233 DESCRIPTION: Brix crypto-js could allow a remo...

Security Bulletin: A vulnerability in Apache Struts affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary A vulnerability in Apache Struts affects the product's management GUI. The Command Line Interface is unaffected. Vulnerability Details CVEID:CVE-2023-34396 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by a flaw when processing Multipart request containing non-fi...

The vulnerability of the update download section for software solutions in the Spectrum Virtualize virtualization technology allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the update download section for Spectrum Virtualize software relates to insufficient protection of operational data during the download process. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by using the “satask...

The vulnerability of the SNMPv3 software for Virtualize Spectrum virtualization allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SNMPv3 software for Virtualize Spectrum virtualization lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the graphical interface of Spectrum Virtualize software lies in the insufficient protection of operational data, which allows attackers to execute arbitrary code and enhance their privileges.

The vulnerability of the graphical interface of Spectrum Virtualize software lies in the insufficient protection of operational data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain increased privileges...