Security Bulletin: Vulnerabilities in Polkit, Node.js, OpenSSH, and Golang Go affect IBM Spectrum Protect Plus (CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, 218243)

Share this post:

Vulnerabilities in Polkit, Node.js, OpenSSL, and Golang Go can affect IBM Spectrum Protect Plus. The vulnerabilities include elevation of privileges, denial of service, obtaining sensitive information, and bypassing security restrictions.

CVE(s): CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, Third Party Entry:   218243

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6562843
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/218087
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/217320
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/217319
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/217758
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/210062
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/216553
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/216563