High Severity

Security Bulletin: Vulnerabilities in IBM Db2 affect IBM Spectrum Protect Server (CVE-2021-38931, CVE-2021-29678, CVE-2021-20373, CVE-2021-39002, CVE-2021-38926)

Share this post:

The IBM Spectrum Protect Server might be affected by vulnerabilities in IBM Db2 such as information disclosure, weaker than expected cryptographic algorithms, and elevated privileges.

CVE(s): CVE-2021-38931, CVE-2021-29678, CVE-2021-20373, CVE-2021-39002, CVE-2021-38926

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
IBM Spectrum Protect Server

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6562919
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/210418
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/199914
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/195521
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/213217
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/210321

More stories

Security Bulletin: IBM MQ for HPE NonStop Server is affected by OpenSSL vulnerability CVE-2022-0778

May 20, 2022 | High Severity

An issue was identifed in OpenSSL when MQ is using it to parse certificates. ...read more

Security Bulletin: OpenSSL publicly disclosed vulnerability affects IBM MobileFirst Platform Foundation

May 17, 2022 | High Severity

IBM MobileFirst Platform Foundation has addressed the following vulnerability by updating the version of OpenSSL ...read more

Security Bulletin: Vulnerabilities in IBM HTTP Server affect IBM Netezza Performance Portal

May 17, 2022 | High Severity

IBM HTTP Server is used by IBM Netezza Performance Portal. IBM Netezza Performance Portal has addressed the applicable CVEs. ...read more