Security Bulletin: Vulnerabilities have been identified in Apache Log4j and the application code shipped with the DS8000 Hardware Management Console (HMC)

Summary The updates indicated below have been released to address the following vulnerabilities: CVE-2021-44228, CVE-2021-45105, CVE-2021-45046, CVE2021-4104, CVE-2021-38930, and CVE-2021-38929. Vulnerability Details CVEID:CVE-2021-38930 DESCRIPTION: IBM System Storage DS8000 Management Console H...

CVE-2021-38929

CVE-2021-38929 affects IBM System Storage DS8000 Management Console (HMC) versions R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0. The issue allows a remote attacker to obtain sensitive information via unpublished URLs (information disclosure). Affected IBM advisories note fixes in ICS patch ...