16245 matches found
CVE-2022-34356
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502...
PT-2022-23612 · Ibm · Ibm Aix +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: A vulnerability exists in the invscout command that could allow a non-privileged local user to obtain root privileges. Recommendations: For IBM AIX versions 7.1 through 7.3,...
Security Bulletin: Information Disclosure and Denial of Service Vulnerabilities in the IBM Spectrum Protect Backup-Archive Client may affect IBM Spectrum Protect for Space Management (CVE-2022-22478, CVE-2022-22474)
Summary The IBM Spectrum Protect back-up archive client is vulnerable to information disclosure and denial of service vulnerabilities which may affect IBM Spectrum Protect for Space Management. Vulnerability Details CVEID:CVE-2022-22478 DESCRIPTION: IBM Spectrum Protect Client 8.1.0.0 through...
Security Bulletin: Apache Log4j Vulnerability Affects IBM Sterling Transformation Extender (CVE-2021-44228)
Summary IBM Sterling Transformation Extender is impacted by Log4j2 security vulnerability, CVE-2021-44228, where an attacker can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. Vulnerability Details...
Security Bulletin: AIX is vulnerable to arbitrary command execution (CVE-2022-1292 and CVE-2022-2068) or an attacker may obtain sensitive information (CVE-2022-2097) due to OpenSSL
Summary A vulnerability in OpenSSL could allow a remote attacker to execute arbitrary commands CVE-2022-1292 and CVE-2022-2068 or obtain sensitive information CVE-2022-2097. OpenSSL is used by AIX as part of AIX's secure network communications. Vulnerability Details CVEID:CVE-2022-2097 DESCRIPTIO...
AIX is vulnerable to arbitrary command execution due to OpenSSL
IBM SECURITY ADVISORY First Issued: Wed Aug 17 16:39:03 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory36.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory36.asc...
dermatologie-esthetique-aix.fr Cross Site Scripting vulnerability OBB-2850543
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: Updating OpenJDK in Identity Insight 10.0 to 17.0.3
Summary This document provides instructions on how to upgrade OpenJDK used in IBM InfoSphere Identity Insight II 10.0 to 17.0.3. Vulnerability Details This document provides instructions on how to upgrade OpenJDK used in IBM InfoSphere Identity Insight II 10.0 to 17.0.0.3. NOTE: Please substitute...
Security Bulletin: AIX is affected by multiple vulnerabilities in Python
Summary AIX is affected by multiple vulnerabilities due to Python. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2022-22827 DESCRIPTION: Expat could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflo...
AIX is vulnerable to cache poisoning due to ISC BIND
IBM SECURITY ADVISORY First Issued: Thu Jul 28 13:24:22 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory21.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory21.asc...
AIX is affected by multiple vulnerabilities in Python
IBM SECURITY ADVISORY First Issued: Thu Jul 28 13:12:18 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pythonadvisory.asc https://aix.software.ibm.com/aix/efixes/security/pythonadvisory.asc...
Security Bulletin: IBM Spectrum Protect 8.1.14.000 Server is vulnerable to bypass of security restrictions (CVE-2022-22394)
Summary IBM Spectrum Protect 8.1.14.000 Server could allow a remote attacker to bypass security restrictions due to improper enforcement of access controls. Vulnerability Details CVEID:CVE-2022-22394 DESCRIPTION: The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass...
Security Bulletin: Information Disclosure in IBM Spectrum Protect Operations Center (CVE-2022-22494)
Summary IBM Spectrum Protect Operations Center may disclosure database information in error messages sent to the user which could be used in future attacks. Vulnerability Details CVEID:CVE-2022-22494 DESCRIPTION: IBM Spectrum Protect Operations Center could allow a remote attacker to gain details...
Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Server (CVE-2021-35550, CVE-2021-35603)
Summary Vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in October 2021. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Server and may be affected by the below vulnerabilities CVEs. Vulnerability Details CVEID: CVE-2021-35603...
Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments (CVE-2021-35550, CVE-2021-35603)
Summary Vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in October 2021. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual...
Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unauthorized sensitive information access due to IBM Java (CVE-2021-35603)
Summary IBM Java is used by IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms in product configuration, management, and data transmission. IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms is impacted by an unauthorized sensitive information access...
Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unauthorized data access due to IBM Java (CVE-2021-35550)
Summary IBM Java is used by IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms in product configuration, management, and data transmission. IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms is impacted by an unauthorized data access issue in IBM Java...
Security Bulletin: Java Vulnerability Affects IBM Connect:Direct Web Services (CVE-2018-1890)
Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by IBM Connect:Direct Web Services. These issues were disclosed as part of the IBM Java SDK updates in March 2019 Vulnerability Details CVE-ID: CVE-2018-1890 Description:On the AIX...
IBM AIX and VIOS Denial of Service Vulnerability
IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX versions 7.1, 7.2, 7.3 and VIOS version 3.1 have a denial-of-service vulnerability that stems from failure to properly process incoming error messages, which can be exploited by...
