High Severity

Security Bulletin: IBM MQ Operator and IBM supplied MQ Advanced container images are vulnerable to multiple issues from Red Hat UBI packages and the IBM WebSphere Application Server Liberty

Share this post:

Multiple issues were identified in Red Hat UBI(ubi8/ubi-minimal) v8.5-x packages that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. We have also identified an issue in the IBM WebSphere Application Server Liberty component that is packaged with IBM supplied MQ Advanced container images.

CVE(s): CVE-2021-3521, CVE-2021-3999, CVE-2021-39031, CVE-2022-23219, CVE-2022-23218

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
IBM MQ Operator CD Release v1.7.0
IBM MQ Operator EUS Release v1.3.2
IBM MQ Advanced Server Container image v9.2.4.0-r1,9.2.0.4-r1-eus

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6569153
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/213411
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/217981
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/213875
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/217303
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/217302

More stories

Security Bulletin: One or more security vulnerabilities has been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics (CVE-2020-4230,CVE-2020-4135,CVE-2020-4204,CVE-2020-4200)

June 23, 2022 | High Severity

IBM® DB2® is shipped as a component of IBM PureData System for Operational Analytics. Information about security vulnerabilities affecting IBM DB2 have been published in a security bulletin (CVE-2020-4230,CVE-2020-4135,CVE-2020-4204,CVE-2020-4200). ...read more



Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities

June 23, 2022 | High Severity

IBM Security Guardium has addressed the following vulnerabilities. ...read more