Code injection

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

CVE-2021-29706

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

Security Bulletin: Streams service for IBM Cloud Pak for Data might be affected by some underlying WebSphere Liberty vulnerabilities

Summary Streams service for IBM Cloud Pak for Data might be affected by some underlying WebSphere Liberty vulnerabilities Vulnerability Details CVEID: CVE-2021-20492 DESCRIPTION: IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injecti...

CVE-2021-20483

IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery SSRF. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197591...

CVE-2021-29702

Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658...

CVE-2021-20567

IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239...

CVE-2021-20566

IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238...

Design/Logic Flaw

Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658...

Server side request forgery (ssrf)

IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery SSRF. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197591...

Information disclosure

IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239...

Design/Logic Flaw

IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789...

CVE-2021-29702

Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658...

CVE-2021-29702

CVE-2021-29702 – IBM Db2 server DoS is confirmed to affect Db2 for Linux/UNIX/Windows (Db2 Connect included) on versions 11.1.4 and 11.5.5, where a specially crafted SELECT can cause the server to terminate abnormally, enabling a denial-of-service condition. The base CVSS v3.0 score is 7.5 ( HIGH...

CVE-2021-20567

IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239...

CVE-2021-20567

IBM Resilient OnPrem (Resilient App Host components) is affected by CVE-2021-20567 where secrets are stored unencrypted by default, enabling a local privileged attacker to access sensitive information. The issue arises from improper or nonexisting encryption within the App Host, which can expose ...

CVE-2021-20566

CVE-2021-20566 concerns IBM Resilient OnPrem (IBM Security SOAR) where TLS1.2 ciphers not enabled for Perfect Forward Secrecy allow potential decryption of sensitive data if an attacker records traffic. The IBM security bulletin notes the vulnerability stems from weaker cryptographic algorithms; ...

CVE-2021-20566

IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238...

CVE-2021-20488

CVE-2021-20488 affects IBM Security Identity Manager 6.0.2 with the Windows Password Synchronization Plug‑in. A remote authenticated attacker could change passwords for other users in a Windows AD environment, due to improper handling in the ISIM Password Sync Plug‑in flow. The issue is confirmed...

CVE-2021-20488

IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789...

CVE-2021-20483

IBM Security Identity Manager 6.0.2 is affected by CVE-2021-20483, a server-side request forgery (SSRF) vulnerability. The issue arises in the IBM Security Identity Manager Password Synchronization plug-in for Windows AD, enabling an authenticated remote attacker to obtain sensitive data. IBM’s a...