High Severity
Potential CPU Security Issue
Feb 10, 2018 5:02 pm EDT
Categorized: High Severity
Share this post:
On Wednesday, January 3, researchers announced a security vulnerability impacting microprocessors. IBM is working with our clients and industry partners on this issue, which has the potential to affect many types of computing devices from different manufacturers. It’s important to note there are no known cases where this vulnerability has been used maliciously.
Patches will be made available for IBM systems via our normal customer portals. Further details concerning potentially impacted processors in the POWER family can be found here. Per our business as usual process, all information for IBM Z clients can be found at the IBM Z Portal.
IBM Storage appliances are not impacted by this vulnerability. For Storage, further details concerning this vulnerability can be found here.
Additional information will be provided through normal IBM communications channels, including IBM Security Bulletins. Please actively monitor both your IBM Support Portal and the IBM PSIRT Blog.
The most immediate action clients can take to protect themselves is to prevent execution of unauthorized software on any system that handles sensitive data, including adjacent virtual machines.
We will continue to update this blog to include additional information as appropriate.
IBM Security Bulletin: Vulnerability in IBM Java SDK affect IBM Tivoli System Automation Application Manager April 2019 CPU (CVE-2019-2684)
Jun 24, 2019 9:01 am EDT | Medium Severity
There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 7 used by IBM Tivoli System Automation Application Manager 4.1.0.0 – 4.1.0.1 . These issues were disclosed as part of the IBM Java SDK updates in April 2019. There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Tivoli ...read more
IBM Security Bulletin: A security vulnerability in OpenSSL affects IBM Rational ClearQuest (CVE-2019-1559)
Jun 24, 2019 9:01 am EDT | Medium Severity
An OpenSSL vulnerability was disclosed on February 26, 2019 by the OpenSSL Project. OpenSSL is used by IBM Rational ClearQuest. IBM Rational ClearQuest has addressed the applicable CVE. CVE(s): VE-2019-1559 Affected product(s) and affected version(s): Rational ClearQuest version 8 and 9 in the following components: ClearQuest hooks and cqperl/ratlperl scripts that use SSL. ClearQuest SSL ...read more
IBM Security Bulletin: Vulnerabilities exist in Watson Explorer Analytical Components and Watson Content Analytics (CVE-2018-1901)
Jun 24, 2019 9:00 am EDT | Medium Severity
Security vulnerabilities have been identified in IBM Watson Explorer Analytical Components, Watson Explorer Foundational Components Annotation Administration Console, and IBM Watson Content Analytics. CVE(s): CVE-2018-1901 Affected product(s) and affected version(s): To see which vulnerabilities apply to your product and version, see the applicable row in the following table. Affected Product Affected Versions Applicable Vulnerabilities IBM ...read more