Security Bulletin: A security vulnerability in Node.js nodemailer module affects IBM Cloud Automation Manager.

Summary A security vulnerability in Node.js nodemailer module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-7769 DESCRIPTION: Nodejs could allow a remote attacker to execute arbitrary commands on the system, caused by improper input validation by the recipient email...

IBM Cloud Pak for Automation Log Information Disclosure Vulnerability

IBM Cloud Pak for Automation is an intelligent software platform for building automation applications in cloud environments from IBM USA. The platform uses pre-integrated automation technologies and low-code tools to design, build and run automation applications and services on any cloud. A...

Security Bulletin: WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity (XXE) Injection Vulnerability (CVE-2020-4949)

Summary WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity XXE Injection vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Principal...

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management. Vulnerability Details CVEID: CVE-2020-8277 DESCRIPTION: Node.js is vulnerable to a denial of service. By getting the application to resolve a DNS record with a larger number of responses, an attacker coul...

Security Bulletin: A security vulnerability in Node.js y18n module affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in Node.js y18n module affects IBM Cloud Pak for Multicloud Management. Vulnerability Details CVEID: CVE-2020-7774 DESCRIPTION: Node.js y18n module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw. By...

Security Bulletin: A security vulnerability in Node.js ini module affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in Node.js ini module affects IBM Cloud Pak for Multicloud Management. Vulnerability Details CVEID: CVE-2020-7788 DESCRIPTION: Node.js ini module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw. By sendin...

Security Bulletin: A security vulnerability in Node.js xml-crypto module affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in Node.js xml-crypto module affects IBM Cloud Pak for Multicloud Management. Vulnerability Details Third Party Entry: 192357 DESCRIPTION: Node.js xml-crypto module security bypass CVSS Base score: 7.5 CVSS Temporal Score: See:...

Security Bulletin: A security vulnerability in PostgreSQL affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in PostgreSQL affects IBM Cloud Pak for Multicloud Management. Vulnerability Details CVEID: CVE-2020-14349 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to execute arbitrary command on the system, caused by improper sanitization of searchpath...

Security Bulletin: A security vulnerability in Node.js codemirror module affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in Node.js codemirror module affects IBM Cloud Pak for Multicloud Management. Vulnerability Details CVEID: CVE-2020-7760 DESCRIPTION: Node.js codemirror module is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw. By...

Security Bulletin: A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management. Vulnerability Details CVEID: CVE-2020-28362 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validation by the math/big.Int methods. By sending a specially-crafted inputs, ...

Security Bulletin: Vulnerabilities in Java affects IBM Cloud Application Business Insights

Summary Vulnerabilities in Java affects IBM Cloud Application Business Insights Vulnerability Details CVEID: CVE-2020-14779 DESCRIPTION: An unspecified vulnerability in Java SE related to the Serialization component could allow an unauthenticated attacker to cause a denial of service resulting in...

Security Bulletin: WebSphere Application Server in IBM Cloud is vulnerable to a directory traversal vulnerability (CVE-2021-20354)

Summary WebSphere Application Server is shipped as a component of IBM WebSphere Application Server in IBM Cloud. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins list...

Security Bulletin: A security vulnerability in MongoDB affects IBM Cloud Automation Manager.

Summary A security vulnerability in MongoDB affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-7928 DESCRIPTION: MongoDB Server could allow a remote authenticated attacker to obtain sensitive information. By issuing a specially crafted query that violates an invariant in...

Security Bulletin: A security vulnerability in GO affects IBM Cloud Automation Manager.

Summary A security vulnerability in GO affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-28362 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validation by the math/big.Int methods. By sending a specially-crafted inputs, a remote...

Security Bulletin: A security vulnerability in Node.js ini module affects IBM Cloud Automation Manager.

Summary A security vulnerability in Node.js ini module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-7788 DESCRIPTION: Node.js ini module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw. By sending a...

Security Bulletin: A security vulnerability in Node.js y18n module affects IBM Cloud Automation Manager.

Summary A security vulnerability in Node.js y18n module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-7774 DESCRIPTION: Node.js y18n module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw. By sending a...

Security Bulletin: WebSphere Application Server in IBM Cloud is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20353)

Summary WebSphere Application Server is shipped as a component of IBM WebSphere Application Server in IBM Cloud. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins list...

Security Bulletin: WebSphere Application Server in IBM Cloud is vulnerable to an XML External Entity (XXE) Injection Vulnerability (CVE-2020-4949)

Summary WebSphere Application Server is shipped as a component of IBM WebSphere in IBM Cloud. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM Planning Analytics has addressed a security vulnerability (CVE-2016-2183)

Summary This Security Bulletin addresses a security vulnerability that has been remediated in IBM Planning Analytics 2.0.9.5 Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, us...

IBM Cloud Pak for Automation Information Disclosure Vulnerability

IBM Cloud Pak for Automation is an enterprise container cloud intelligence automation software platform that supports business users in building and running automation applications using containers on Kubernetes. An information disclosure vulnerability exists in IBM Cloud Pak for Automation 20.0....