Security Bulletin: An unspecified vulnerability could cause a denial of service for WebSphere eXtreme Scale 8.6 (CVE-2015-4936)

Summary An unspecified vulnerability in WebSphere eXtreme Scale 8.6 can cause a denial of service. Vulnerability Details CVEID: CVE-2015-4936 DESCRIPTION: An unspecified vulnerability could cause a denial of service for WebSphere eXtreme Scale 8.6 servers. CVSS Base Score: 5 CVSS Temporal Score:...

Security Bulletin: : The WebSphere eXtreme Scale 7.1.0 and 7.1.1 monitoring console lacks protection for various vulnerabilities. (CVE-2015-2025 CVE-2015-2026 CVE-2015-2027 CVE-2015-2028 CVE-2015-2029 CVE-2015-2030 CVE-2015-2031)

Summary These vulnerabilities in the WebSphere eXtreme Scale monitoring console may allow an attacker to gain access to the monitoring console, getting read/only access to statistics data on grid usage. Vulnerability Details CVEID: CVE-2015-2025 DESCRIPTION: IBM WebSphere Extreme Scale could allo...

Security Bulletin: A vulnerability in IBM Java Runtime affects WebSphere eXtreme Scale (CVE-2015-0488 )

Summary There is a vulnerability in IBM Java Runtime , Versions 6 and 7 that is used by WebSphere eXtreme Scale. These issues were disclosed as part of the IBM Java SDK updates in April 2015. Vulnerability Details CVEID:CVE-2015-0488 DESCRIPTION: An unspecified vulnerability related to the JSSE...

Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere eXtreme Scale (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects WebSphere eXtreme Scale version 7.1.0, 7.1.1, 8.5, and 8.6. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect WebSphere eXtreme Scale: CVE-2015-0138, CVE-2014-6593, CVE-2015-0410, CVE-2015-0383

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition. These vulnerabilities affect WebSphere eXtreme Scale version 7.1.0, 7.1.1, 8.5, and 8.6. These issues were disclosed as part of the IBM Java SDK updates in January 2015. This bulletin also addresses t...

Security Bulletin: Several Vulnerabilities in the Java SDK affect WebSphere eXtreme Scale

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere eXtreme Scale. These issues were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details The following two advisories are included in the IBM® SDK Java™...

Security Bulletin: Vulnerability in SSLv3 affects WebSphere eXtreme Scale and WebSphere eXtreme Scale for z/OS versions 7.0, 7.1.0, 7.1.1, 8.5, and 8.6. (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in WebSphere eXtreme Scale and WebSphere eXtreme Scale for z/OS versions 7.0, 7.1.0, 7.1.1, 8.5, and 8.6. Vulnerability Details CVE-ID:...

Security Bulletin: Multiple security vulnerabilities exist in the IBM SDK, Java Technology Edition provided with WebSphere eXtreme Scale

Summary Three security vulnerabilities were identified in the IBM® SDK, Java™ Technology Edition provided with WebSphere eXtreme Scale. Vulnerability Details CVEID: CVE-2014-0878 DESCRIPTION: A vulnerability in the IBMSecureRandom implementation of the IBMJCE and IBMSecureRandom cryptographic...

Security Bulletin: WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance client vulnerability (CVE-2013-6734)

Summary In certain configurations, a security vulnerability exists in WebSphere eXtreme Scale Client, the client that is used with WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance. WebSphere eXtreme Scale Client might allow cached HTTP session data of one user to be accessed by a...

CVE-2018-1431

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

Design/Logic Flaw

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

CVE-2018-1431

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

CVE-2018-1431

CVE-2018-1431 is a GSKit vulnerability affecting IBM Spectrum Scale components (notably GPFS-based deployments) that could allow a local attacker to gain control of the Spectrum Scale daemon and read/modify files, potentially elevating privileges. Connected IBM bulletins enumerate affected releas...

CVE-2018-1431

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

CVE-2018-1431: Undefined Security Weakness

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

PT-2018-12427

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 Description A local attacker could exploit this issue to obtain control of the Spectrum Scale daemon, access and modify files in the Spectrum Scale file system, and possibly gai...

Outpost24 Appsec Scale for Web Application Scanning

Today I would like to write about yet another Outpost24 product - cloud Web Application Scanner Appsec Scale. It is available in the same interface as Outpost24 Outscan, that I reviewed earlier. Select APPSEC SCALE in the start menu and you can scan web applications: New application If you don't...

May 17, 2018—KB4103724 (Preview of Monthly Rollup)

None None...

PT-2018-6022

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-08-11 Firefox OS for MSM versions prior to 2017-08-11 QRD Android versions prior to 2017-08-11 Description: A buffer overrun occurs when processing the QCA NL80211 VENDOR SUBCMD SET TXPOWER SCALE DECR DB...

The vulnerabilities of the IBM Spectrum Scale and General Parallel File System data storage management software are caused by buffer overflows, allowing attackers to execute arbitrary code with root privileges or trigger service interruptions.

The vulnerabilities of the IBM Spectrum Scale and General Parallel File System data storage management software are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code with root privileges or cause service interruptions...