How to Deploy a SIEM That Actually Works

I deployed my SIEM in days, not months – here’s how you can too As an IT administrator at a highly digitized manufacturing company, I spent many sleepless nights with no visibility into the activity and security of our environment before deploying a security information and event management SIEM...

At Kong Summit 2022, Imperva Will Demonstrate how to Use Terraform to Onboard Kong-managed Apps and Discover API Endpoints

Imperva and Kong are working together to simplify APIs Imperva is attending Kong’s 2022 Summit on September 28 and 29 in San Francisco. Imperva’s Summit booth will feature both a recorded and live demo built to showcase how Kong and Imperva seamlessly integrate using Terraform. Imperva, a...

Security Bulletin: IBM SPSS Modeler Premium - Text Analytics SSL Spoofing (CVE-2012-5785)

Abstract Last updated on December 11, 2012. When using the Text Analytics Server from the IBM SPSS Modeler Premium product with the SSL option enabled default is disabled, then an SSL connection can be established without verifying the hostname of the target connection against the name on the SSL...

Security Bulletin: IBM Smart Analytics System 5600 clients affected by vulnerabilities in IBM JRE (CVE-2012-4820, CVE-2012-4821, CVE-2012-4822, CVE-2012-4823)

Abstract These vulnerabilities are only applicable to Java deployments where untrusted code may be executed e.g. Java applets running in a web browser. Content VULNERABILITY DETAILS CVE IDs: CVE-2012-4820, CVE-2012-4821, CVE-2012-4822, CVE-2012-4823 DESCRIPTION: The IBM Smart Analytics System 560...

Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected by vulnerabilities in OpenSSL (CVE-2013-0166, CVE-2013-0169)

Abstract A number of security vulnerabilities have been identified in the OpenSSL libraries that are part of the operating system software included with the vulnerable systems. Content VULNERABILITY DETAILS CVE IDs: CVE-2013-0166, CVE-2013-0169 DESCRIPTION: The IBM Smart Analytics System 7600, IB...

Security Bulletin: IBM Smart Analytics System 5710 is affected by vulnerabilities in OpenSSL (CVE-2013-0166, CVE-2013-0169)

Abstract The IBM Smart Analytics System 5710 is shipped with SUSE Linux Enterprise Server Edition operating system software. Two security vulnerabilities have been identified in the OpenSSL libraries that are part of the operating system software. See the references section for links to the...

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000 and D5100 and IBM Smart Analytics System 1050, 2050, 5600 and 5710 are affected by vulnerabilities in OpenSSL

Abstract A number of security vulnerabilities have been identified in the OpenSSL libraries that are part of the operating system software included with the vulnerable systems. Content VULNERABILITY DETAILS CVE IDs: CVE-2012-2131, CVE-2012-2110, CVE-2012-0884, CVE-2012-0050, CVE-2011-4108,...

Security Bulletin: IBM OmniFind Enterprise Edition and IBM Content Analytics (CVE-2013-0599, CVE-2013-0464, CVE-2013-0467)

Abstract Potential security vulnerabilities exist in the IBM Eclipse Help System that is shipped with the IBM OmniFind Enterprise Edition and IBM Content Analytics products. Content The products listed below may be affected by security vulnerabilities in the IBM Eclipse Help System. This issue is...

Security Bulletin: IBM PureData System for Operational Analytics A1791 and IBM Smart Analytics System 7600, 7700, and 7710 are affected by a privilege escalation vulnerability in the DB2 Audit Facility (CVE-2013-3475)

Abstract The IBM PureData System for Operational Analytics A1791, IBM Smart Analytics System 7600, IBM Smart Analytics System 7700, and IBM Smart Analytics System 7710 are shipped with DB2 9.7 or DB2 10.1. These versions of DB2 contain a security vulnerability in the DB2 Audit Facility which allo...

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000 and C4000, IBM Smart Analytics System 1050, 2050, and 5710 systems are affected by privilege escalation vulnerability in IBM DB2 for Linux, Unix, and Windows Audit Facility (CVE-2013-3475)

Abstract IBM InfoSphere Balanced Warehouse C3000 and C4000 and IBM Smart Analytics System 1050, 2050, and 5710 systems are shipped with DB2 Version 9.7. There is a security vulnerability in the DB2 Audit Facility which allows an attacker to gain DB2 instance owner level privileges. This...

Security Bulletin: Potential denial-of-service (DoS) issues related to Jetty application server identified in OmniFind Enterprise Edition and Content Analytics with Enterprise Search products

Abstract Abstract: The Jetty application server may contain denial-of-service DoS vulnerabilities CVE-2011-4461. Content The products listed below may be affected by potential denial-of-service DoS vulnerabilities of the Jetty application server when their search or analytics applications are...

Security Bulletin: IBM OmniFind Enterprise Edition and IBM Content Analytics – Oracle Critical Patch Updates February 2013 (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169)

Abstract Potential security vulnerabilities exist in the IBM Java SDK that is shipped with the IBM OmniFind Enterprise Edition and IBM Content Analytics and products. Content The products listed below may be affected by security vulnerabilities reported by Oracle’s February 2013 Critical Patch...

Security Bulletin: IBM Smart Analytics System 1050, 2050, and 5600 and IBM InfoSphere Balanced Warehouse C3000, C4000, and D5100 are affected by vulnerabilities in OpenSSL (CVE-2013-0166, CVE-2013-0169)

Abstract The IBM Smart Analytics System 1050 for Linux, IBM Smart Analytics System 2050 for Linux, IBM InfoSphere Balanced Warehouse C Class for Linux, IBM InfoSphere Balanced Warehouse D5100, and IBM Smart Analytics System 5600 systems are shipped with SUSE Linux Enterprise Server Edition...

Security Bulletin: IBM Smart Analytics System 5600 V3 is affected by a vulnerability in the IBM DB2 Fast Communications Manager (CVE-2013-4032)

Abstract A vulnerability in IBM DB2 for Linux, UNIX, and Windows could allow arbitrary data sent to the Fast Communications Manager FCM to cause server denial of service. Only IBM Smart Analytics System 5600 V3 systems that ship with IBM DB2 Version 10.1 are vulnerable. Content VULNERABILITY...

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, and D5100 and IBM Smart Analytics System 1050, 2050, 5600, 5710, 7600, 7700 and 7710 are affected by an unauthorized access to table vulnerability in IBM DB2 (CVE-2013-4033)

Abstract A vulnerability in IBM DB2 for Linux, UNIX, and Windows could allow an authenticated user holding EXPLAIN authority to temporarily gain SELECT, INSERT, UPDATE or DELETE privilege on a table. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-4033 IBM InfoSphere Balanced Warehouse C3000,...

Security Bulletin: IBM Smart Analytics System 5600 is affected by vulnerabilities in the IBM Java SDK

Abstract The IBM Smart Analytics System 5600 contains a management host that is installed with the Mozilla Firefox browser. The browser is configured to use IBM Java SDK for Java Web Start applications. The browser software is configured in this manner to allow the use of the Remote Control...

Security Bulletin: IBM InfoSphere Balanced Warehouse D5100 and IBM Smart Analytics System 5600 are affected by a privilege escalation vulnerability in the DB2 Audit Facility (CVE-2013-3475)

Abstract IBM InfoSphere Balanced Warehouse D5100 and IBM Smart Analytics System 5600 are shipped with DB2 9.7. This version of DB2 contains a security vulnerability in the DB2 Audit Facility which allows an attacker to gain DB2 instance owner level privileges. This vulnerability can only be...

Security Bulletin: Security Vulnerability affecting IBM Social Media Analytics Platform version 1.2

Abstract IBM Social Media Analytics Version 1.2 contains a reflective Cross-site scripting XSS vulnerability. CVE-2013-3999 Content VULNERABILITY DETAILS CVE-2013-3999: An attacker who is able to trick a user into clicking on a malicious link may be able to execute a script of their choosing. Thi...

Security Bulletin: IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract The Java API documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation that...

Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected by vulnerabilities in OpenSSL

Abstract A number of security vulnerabilities have been identified in the OpenSSL libraries that are part of the operating system software included with the vulnerable systems. Content VULNERABILITY DETAILS CVE IDs: CVE-2012-2131, CVE-2012-2110, CVE-2012-0884, CVE-2012-0050, CVE-2011-4108,...