High Severity

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to denial of service due to Apache Log4j (CVE-2021-45105)

January 17, 2022

Categorized: High Severity

Share this post:

Automation Assets in IBM Cloud Pak for Integration is vulnerable to CVE-2021-45105 with details below.

CVE(s): CVE-2021-45105

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
Automation Assets in IBM Cloud Pak for Integration (CP4I) 2021.2.1
2021.4.1

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6541288
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/215647


Previous Post

Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Apache HTTP Server version used in it. (CVE-2021-33193)

Next Post

Security Bulletin: Log4j remote code execution vulnerability in Apache Solr and Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2021-44228)
More stories

Security Bulletin: Operations Dashboard is vulnerable to remote connection exploit by Go CVE-2022-30629

August 12, 2022 | High Severity

Operations Dashboard is vulnerable to remote connection exploit by Go CVE-2022-30629 with details below ...read more

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to denial of service due to CVE-2022-31129

August 10, 2022 | High Severity

Automation Assets in IBM Cloud Pak for Integration is vulnerable to denial of service due to CVE-2022-31129 with details below ...read more

Security Bulletin: Multiple security vulnerabilities has been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics

August 10, 2022 | High Severity

IBM® DB2® is shipped as a component of IBM PureData System for Operational Analytics. Information about security vulnerabilities affecting IBM DB2 have been published in a security bulletin (CVE-2022-22389, CVE-2022-22390, CVE-2022-25313, CVE-2022-25236, CVE-2022-25235, CVE-2022-25314, CVE-2022-25315). ...read more