Security Bulletin: Multiple TensorFlow Vulnerabilities Affect IBM Watson Machine Learning on CP4D

Summary TensorFlow is vulnerable to a denial of service on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-29538 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by division by zero in Conv2DBackpropFilter. By sending a specially-crafted request, a...

Security Bulletin: Golang Go Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-33194)

Summary Golang Go is vulnerable to a denial of service, caused by an infinite loop in golang.org/x/net/html on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-33194 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by an infinite loop in...

Security Bulletin: Golang Go Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-31525)

Summary Golang Go is vulnerable to a denial of service, caused by a flaw in net/http on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-31525 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in net/http. By sending a specially-crafted header ...

Security Bulletin: Multiple TensorFlow Vulnerabilities Affect IBM Watson Machine Learning on CP4D

Summary TensorFlow is vulnerable to a denial of service on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-29608 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by a heap out-of-bounds and NULL pointer dereference flaw in "RaggedTensorToTensor". By...

Security Bulletin: Multiple TensorFlow Vulnerabilities Affect IBM Watson Machine Learning on CP4D

Summary TensorFlow is vulnerable to a denial of service on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-29547 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by heap out-of-bounds in QuantizedBatchNormWithGlobalNormalization. By sending a...

CVE-2021-29907

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633...

CVE-2021-29907

IBM OpenPages with Watson versions 8.1–8.2 are affected by CVE-2021-29907, where an authenticated user can upload a file that leads to arbitrary code execution. Root cause is tied to the upload functionality permitting code execution. Remediation provided by IBM fixes: 8.2 Fix Pack 2 (8.2.0.2) or...

Security Bulletin: IBM Watson Machine Learning Accelerator is affected by a vulnerability in Nginx

Summary IBM Watson Machine Learning Accelerator is affected by a vulnerability in Nginx. IBM Watson Machine Learning Accelerator havs addressed the CVE-2021-23017. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

PT-2021-18539 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.1 through 8.2 Description: The issue allows an authenticated user to upload a file that could execute arbitrary code on the system. Recommendations: For versions 8.1 and 8.2, update to a version that...

Security Bulletin: IBM OpenPages with Watson has addressed a remote code execution vulnerability (CVE-2021-29907)

Summary An issue was found within the IBM OpenPages with Watson that could allow an authenticated user to upload a file that could execute arbitrary code. Vulnerability Details CVEID: CVE-2021-29907 DESCRIPTION: IBM OpenPages with Watson could allow an authenticated user to upload a file that cou...

CVE-2021-29907

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633...

Security Bulletin: vulnerabilities in Nginx affect IBM Watson Machine Learning Accelerator 2.3.1

Summary Vulnerabilities existing in the Nginx version used by IBM Watson Machine Learning Accelerator 2.3.1. nginx upgraded to version 1.20.1 which resolves these vulnerabilities, are available on IBM Fix Central. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fix...

Security Bulletin: A vulnerability in glibc impacts IBM Watson™ Speech Services

Summary A vulnerability in glibc, affecting IBM Watson™ Speech Services, has the potential to result in a denial of service. Vulnerability Details CVEID: CVE-2020-27618 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a denial of service, caused by an error when processing some...

Security Bulletin: A WAS Liberty Java vunerability affects IBM Watson™ Speech Services

Summary A vulnerability exists in the Java SE, Java SE Embedded product of Oracle Java SE component: Security, that affects IBM Watson™ Speech Services . Vulnerability Details CVEID: CVE-2020-2773 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Security component could...

Security Bulletin: Multiple TensorFlow Vulnerabilities Affect IBM Watson Machine Learning on CP4D

Summary TensorFlow is vulnerable to a denial of service, caused by a query-of-death flaw when running an LSTM/GRU model on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2020-26270 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by a query-of-death flaw...

Security Bulletin: Netty Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-21295)

Summary Netty is vulnerable to HTTP request smuggling, caused by improper validation of Content-Length header by the Http2MultiplexHandler on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-21295 DESCRIPTION: Netty is vulnerable to HTTP request smuggling, caused by...

Security Bulletin: Netty Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-21409)

Summary Netty is vulnerable to request smuggling, caused by improper validation of request, caused by missing validation of content-length on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-21409 DESCRIPTION: Netty is vulnerable to request smuggling, caused by improper...

Security Bulletin: Golang Go Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2020-29652)

Summary Golang Go is vulnerable to a denial of service, caused by a NULL pointer dereference on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2020-29652 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a NULL pointer dereference in the...

Security Bulletin: akka-http-core Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-23339)

Summary akka-http-core allows is vulnerable to allow multiple Transfer-Encoding headers on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-23339 DESCRIPTION: com.typesafe.akka:akka-http-core is vulnerable to request smuggling, caused by improper validation of request. By...

Security Bulletin: Watson Explorer is affected by Apache PDFBox vulnerabilities (CVE-2021-27807, CVE-2021-27906, CVE-2021-31811, CVE-2021-31812)

Summary IBM Watson Explorer has addressed the following vulnerabilities in Apache PDFBox. Vulnerability Details CVEID: CVE-2021-27807 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by an infinite loop flaw. By persuading a victim to open a specially-crafted .PDF file, a...