IT36157: MULTIPLE VULNERABILITIES IN IBM JAVA RUNTIME AFFECT STERLING CONNECT:DIRECT FOR WINDOWS

6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if106
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if104
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if103
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if100
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if095
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if094
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if090
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if089
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if088
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if087
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if087
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if083
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if081
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if084
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if079
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if083
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if077
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if081
4.7.0.7-SterlingConnectDirectforMicrosoftWindows-x86-fp0007-if021
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if028
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if028
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if004
4.7.0.7-SterlingConnectDirectforMicrosoftWindows-x86-fp0007-if023
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if034
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if012
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if015
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if033
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if021
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if022
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if042
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if048
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if037
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if049
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if056
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if050
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if050
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if052
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if056
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if061
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if053
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if057
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if057
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if068
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if063
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if069
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if064
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if069
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if073

APAR status

• Closed as program error.

Error description

• Multiple vulnerabilities have been found in the IBM Runtime
  Environment Java Technology Edition, Version 8 used by Install
  Agent in IBM Sterling Connect:Direct for Microsoft Windows. IBM
  Sterling Connect:Direct for Microsoft Windows has addressed the
  applicable CVEs (CVE-2019-17639, CVE-2020-2781, CVE-2020-14577,
  CVE-2020-14578, CVE-2020-14579, CVE-2020-14782).
  

Local fix

• STRMFT-11927
  VF / VF
  Circumvention: None
  

Problem summary

• Users Affected:
  Sterling Connect:Direct for Windows 4.7.0
  Sterling Connect:Direct for Windows 4.8.0
  Connect:Direct for Windows 6.0.0
  Connect:Direct for Windows 6.1.0
  
  Problem Description:
  Multiple vulnerabilities have been found in the IBM Runtime
  Environment Java Technology Edition, Version 8 used by Install
  Agent in IBM Sterling Connect:Direct for Microsoft Windows. IBM
  Sterling Connect:Direct for Microsoft Windows has addressed the
  applicable CVEs (CVE-2019-17639, CVE-2020-2781, CVE-2020-14577,
  CVE-2020-14578, CVE-2020-14579, CVE-2020-14782).
  
  Platforms Affected:
  Windows
  

Problem conclusion

• Resolution Summary:
  Updated the IBM Runtime Environment Java.
  
  Delivered In:
  Sterling Connect:Direct for Windows 4.7.0.7_iFix021
  Sterling Connect:Direct for Windows 4.8.0.3_iFix028
  Connect:Direct for Windows 6.0.0.4_iFix028
  Connect:Direct for Windows 6.1.0.1_iFix003
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR CD FOR WIND

• Fixed component ID

  5725C9908

Applicable component levels