Lucene search

K
ibmIBM7B5FB804698B3D35AF883F3D831514AE33ED2DB1AD6280373A1A1F360CAE9AF9
HistoryDec 11, 2020 - 7:43 p.m.

Security Bulletin: Java vulnerability CVE-2020-2601 affecting IBM Streams

2020-12-1119:43:27
www.ibm.com
25

0.001 Low

EPSS

Percentile

34.6%

Summary

Java vulnerability CVE-2020-2601 affecting IBM Streams. Please see below for more details on this vulnerability.

Vulnerability Details

CVEID:CVE-2020-2601
**DESCRIPTION:**An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Security component could allow an unauthenticated attacker to obtain sensitive information resulting in a high confidentiality impact using unknown attack vectors.
CVSS Base score: 6.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174548 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
InfoSphere Streams 4.2.1.x
InfoSphere Streams 4.3.1.x

Remediation/Fixes

Apply 4.3.1 Fix Pack 4 (4.3.1.4) or higher .

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm streamseq4