Medium Severity
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private – OpenSSL (CVE-2019-1563, CVE-2019-1549, CVE-2019-1547)
Jan 2, 2020 7:00 pm EST
Categorized: Medium Severity
Share this post:
Security Vulnerabilities affect IBM Cloud Private – OpenSSL
Affected product(s) and affected version(s):
| Affected Product(s) | Version(s) |
| IBM Cloud Private | 3.2.1 CD |
| IBM Cloud Private | 3.2.0 CD |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/pages/node/1167100
Security Bulletin: WebSphere Application Server browser stack trace vulnerability affects IBM Control Center (CVE-2019-4441)
Jan 28, 2020 7:01 pm EST | Medium Severity
Webspher Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser ...read more
Security Bulletin: WebSphere Application Server improper cookie setting vulnerability affects IBM Control Center (CVE-2019-4305)
Jan 28, 2020 7:01 pm EST | Medium Severity
WebSphere Application Server in IBM Control Center could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. ...read more
Security Bulletin: Websphere denial-of-service vulnerability affects IBM Control Center (CVE-2019-12402)
Jan 28, 2020 7:00 pm EST | Medium Severity
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress. ...read more