Security

In IBM Spectrum® Control, the security of your data is critical. At IBM®, we're serious about keeping that data safe and constantly strive to address vulnerabilities before they impact your business.

Maintenance and security fixes are regularly provided for the IBM Spectrum Control base product. The base product includes core technology and components such as WebSphere® Application Server Liberty profile and the Java™ Runtime Environment.

When security issues or vulnerabilities are discovered in IBM Spectrum Control or its core components, IBM analyzes the product and distributes a fix or mitigation instructions, as appropriate. These issues are communicated through security bulletins on ibm.com® and through discrete communication when necessary.

To find security bulletins, go to the following pages on ibm.com:
More information about security: For more information about security in IBM Spectrum Control, check out this topics:

Managing security for related software

An IBM Spectrum Control installation also includes other products, such as Db2®. You can monitor fixes for these related products in the same way that you do for IBM Spectrum Control on ibm.com:

Each product team is responsible for publishing their own security bulletins. Review any published security bulletins to identify affected versions and follow the remediation or fix information. If these products are affected, they might provide a maintenance fix. It is acceptable to apply a fix pack to these products to resolve security vulnerabilities or other problems.

Important: Upgrading to a new version or release of these products is not typically supported by IBM Spectrum Control and might result in compatibility issues. Even with fix pack updates, read the security bulletins carefully for any compatibility concerns. For example, if a common protocol is disabled, both the related product and IBM Spectrum Control must also accommodate a new protocol.