Lucene search

K
ibmIBMC814907AC047F6AC7BFC9D7D921AD233E59D7E7C19ECC519806B31C4B365D6A4
HistoryNov 18, 2021 - 9:14 a.m.

Security Bulletin: A vulnerability in IBM® SDK, Java™ Technology Edition may affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

2021-11-1809:14:40
www.ibm.com
27
ibm
sdk
java technology
cloud orchestrator
enterprise
vulnerability
version 8.0.5.40
cve-2021-2341
oracle
critical patch update

EPSS

0.001

Percentile

49.9%

Summary

A vulnerability in IBM® SDK Java™ Technology Edition, Version 8.0.5.40 used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. CVE-2021-2341 was disclosed as part of the Oracle July 2021 Critical Patch Update.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
IBM Cloud Orchestrator 2.5.0.10

Remediation/Fixes

The recommended solution is to manually apply the fix (version 8.0.6.35 or later) on IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5.0.10.

Consult the following security bulletin for the vulnerability details and information about their fixes:

Security Bulletin: CVE-2021-2341 may affect IBM® SDK, Java™ Technology Edition

Workarounds and Mitigations

None