Security Bulletin: Vulnerabilities have been identified in Apache Log4j and the application code shipped with the DS8000 Hardware Management Console (HMC)

Summary The updates indicated below have been released to address the following vulnerabilities: CVE-2021-44228, CVE-2021-45105, CVE-2021-45046, CVE2021-4104, CVE-2021-38930, and CVE-2021-38929. Vulnerability Details CVEID:CVE-2021-38930 DESCRIPTION: IBM System Storage DS8000 Management Console H...

CVE-2021-38930

The CVE-2021-38930 issue affects IBM System Storage DS8000 Management Console (HMC) for R8.5 (88.5x.x.x), R9.1 (89.1x.0.0), and R9.2 (89.2x.0.0). A remote attacker could obtain sensitive information via unpublished URLs. IBM’s bulletin lists CVSS ~5.3 base (3.0) with a network attack vector, and ...