Lucene search

K
ibmIBM9DD07998DE4D99334E19E37C90BA70194DAE5050543195DCC1A8406A61742109
HistoryNov 24, 2021 - 6:46 p.m.

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Installation Manager and IBM Packaging Utility

2021-11-2418:46:35
www.ibm.com
10

0.001 Low

EPSS

Percentile

50.0%

Summary

There is a vulnerability in IBM Runtime Environment Java Version 8 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2021-2341
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Networking component could allow an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact using unknown attack vectors.
CVSS Base score: 3.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205768 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
Capilano (Installation Manager) 1.9.x

Remediation/Fixes

Product VRMF APAR Remediation/First Fix
IBM Installation Manager and IBM Packaging Utility 1.9.x No APAR 1.9.2 IBM Installation Manager Remediation
1.9.2 IBM Packaging Utility Remediation

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm installation managereq1.9.1.5