CVE-2021-38941

The CVE-2021-38941 entry affects IBM Cloud Pak for Multicloud Management Monitoring. Affected versions 2.0–2.3 run a few containers in privileged mode, enabling potential host information leakage or destruction if an attacker can execute commands inside those containers. Root cause: containers wi...

CVE-2021-38941

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048...

IBM CloudPak for Multicloud Monitoring 安全漏洞

IBM CloudPak for Multicloud Monitoring is an open hybrid cloud management platform from IBM USA. A security vulnerability exists in IBM CloudPak for Multicloud Monitoring versions 2.0 through 2.3 that stems from vulnerability to host information leakage or corruption...

Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring runs containers with excessive permissions (CVE-2021-38941)

Summary IBM CloudPak for Multicloud Monitoring had a few containers running in priviliged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. Now only containers requiring this permissions are running in...

Security Bulletin: Vulnerability in Apache Log4j affects IBM Telco Network Cloud Manager (CVE-2021-44228)

Summary A vulnerability was identified within the Apache Log4j library that is used by IBM Telco Network Cloud Manager to provide logging functionality. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to...

Security Bulletin: Vulnerability in Apache Log4j affects IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps (CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library. The library is used by IBM CloudPak foundational services which is a dependency of IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could all...

Security Bulletin: IBM MQ Advanced Cloud Paks are vulnerable to multiple issues with in the Systemd package (CVE-2018-16866 CVE-2018-16864 CVE-2018-16865)

Summary Multiple vulnerabilities were identified with the Systemd package that is included in all versions of the IBM MQ CloudPak. Vulnerability Details CVEID: CVE-2018-16866 DESCRIPTION: systemd could allow a local attacker to obtain sensitive information, caused by an out-of-bounds read in...