High Severity

Security Bulletin: Vulnerability in polkit affects Cloud Pak System ( CVE-2021-4034)

Share this post:

Polkit is used by IBM Cloud System OS. This security bulletin service applies to IBM Cloud System , IBM Cloud System Software and IBM Cloud System Software Suite.

CVE(s): CVE-2021-4034

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
IBM Cloud Pak System 2.3.3.0, 2.3.3.1, 2.3.3.2, 2.3.3.3, 2.3.3.4
IBM Cloud Pak System 2.3.0.1, 2.3.1.1, 2.3.2.0 

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6611089
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/218087

More stories

Security Bulletin: CP4D Match 360 is impacted due to vulnerability in IBM WebSphere Application Server Liberty spoofing due to Eclipse Paho (CVE-2019-11777)

October 3, 2022 | High Severity

There is a vulnerability in the Eclipse Paho library used by IBM WebSphere Application Server Liberty with the rtcomm-1.0 or rtcommGateway-1.0 feature enabled. Provided that IBM Match 360 uses WebSphere Liberty Profile, this vulnerability has been addressed in IBM Match 360 v4.5.2 and prior. ...read more


Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

October 3, 2022 | High Severity

A vulnerability in Apache Tomcat affects the product's management GUI. The Command Line Interface is unaffected. ...read more


Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

October 3, 2022 | High Severity

Java is used by IBM Robotic Process Automation for Cloud Pak as part of several container services that run Java applications. ...read more