Lucene search

IBM997923D1DC826B1C925C28AE01A02BFE7FD22B1A54F58DE2DADB805D24BC163C

HistoryFeb 14, 2024 - 7:45 a.m.

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager - Oracle October 2023 CPU (CVE-2023-22081, CVE-2023-22067, CVE-2023-5676)

2024-02-1407:45:18

www.ibm.com

ibm

tivoli system automation

java technology edition

oracle

vulnerabilities

october 2023 cpu

security bulletin

ibm sdk

ibm tivoli system automation application manager

remediation

fixes

download link

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

Summary

There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. These issues were disclosed as part of the IBM Java SDK updates in October 2023.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Tivoli System Automation Application Manager	4.1

Remediation/Fixes

The recommended solution is to apply the corresponding fix to IBM Tivoli System Automation Application Manager. To select the fix you need to apply in your environment, click on ‘Download link’ in the table below.

If you are running IBM Tivoli System Automation Application Manager 4.1.0.3, please apply interim fix “4.1.0.3-TIV-SAAMR-<OS>-IF0012” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.3.
If you are running IBM Tivoli System Automation Application Manager 4.1.0.4, please apply interim fix “4.1.0.4-TIV-SAAMR-<OS>-IF0009” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.4.
If you are running IBM Tivoli System Automation Application Manager 4.1.0.5, please apply interim fix “4.1.0.5-TIV-SAAMR-<OS>-IF0007” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.5.
If you are running IBM Tivoli System Automation Application Manager 4.1.0.6, please apply interim fix “4.1.0.6-TIV-SAAMR-<OS>-IF0001” where <OS> represents the operating system for which you want to install the interim fix of this product version. You can apply this interim fix on top of any fixpack of version 4.1.0.6.

Product	VRMF	APAR
IBM Tivoli System Automation Application Manager	4.1	Download Link

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_system_automation_application_managerMatch4.1

VendorProductVersionCPE
ibmtivoli_system_automation_application_manager4.1cpe:2.3:a:ibm:tivoli_system_automation_application_manager:4.1:*:*:*:*:*:*:*