Security Bulletin: Several System x and Flex Systems products are affected by vulnerabilities in OpenSSL (CVE-2013-6449, CVE-2013-4353 and CVE-2013-6450)

Summary Security vulnerabilities discovered in OpenSSL have been fixed in recent releases of several IBM System x and Flex Systems products. You may have already applied the updates containing these fixes. Vulnerability Details Abstract Security vulnerabilities discovered in OpenSSL have been fix...

Security Bulletin: Two vulnerabilities fixed in recent IBM ServerGuide, UXSPI and ToolsCenter Suite release (CVE-2014-4244, CVE-2104-4835)

Summary IBM ToolsCenter Suite is affected by one vulnerability in Java, while IBM ServerGuide, UXSPI and ToolsCenter Suite are all affected by an additional vulnerability. Vulnerability Details Abstract IBM ToolsCenter Suite is affected by one vulnerability in Java, while IBM ServerGuide, UXSPI a...

Command injection

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility ASU, UpdateXpress System Pack Installer UXSPI or Dynamic System Analysis DSA to a second machine, the other users may be able to see the user ID...

CVE-2017-3743

The CVE-2017-3743 issue affects Lenovo ToolsCenter components: Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI), and Dynamic System Analysis (DSA). When multiple users are concurrently logged into a system and one user issues a command to a second machine, other users m...

Design/Logic Flaw

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...

CVE-2014-4835

The CVE-2014-4835 issue affects IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63. The root cause is credentials being written to log files, enabling a local user to read sensitive information. Impact is partial confidentiality...