IT41528: A VULNERABILITY IN GOOGLE GSON AFFECTS STERLING CONNECT:DIRECT FOR WINDOWS (CVE-2022-25647)

6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if011
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if005
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008
6.2.0.7-IBMConnectDirectforMicrosoftWindows-x64-fp0007
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if048
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if044
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if043
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if039
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if033
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if028
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if025
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if024
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if023
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if018
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if015
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if014
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if009
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if007
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if004
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006
6.2.0.5-IBMConnectDirectforMicrosoftWindows-x64-fp0005
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if046
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if045
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if040
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if038
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if037
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if028
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if022
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if013

APAR status

• Closed as program error.

Error description

• A vulnerability has been found in Google gson used by Integrated
  File Agent in IBM Sterling Connect:Direct for Microsoft
  Windows. IBM Sterling Connect:Direct for Microsoft Windows has
  addressed the applicable CVE (CVE-2022-25647).
  

Local fix

• STRMFT-13547
  VF / VF
  Circumvention: None
  

Problem summary

• Users Affected:
  Sterling Connect:Direct for Windows 6.2.0
  
  Problem Description:
  A vulnerability has been found in Google gson used by Integrated
  File Agent in IBM Sterling Connect:Direct for Microsoft Windows.
  IBM Sterling Connect:Direct for Microsoft Windows has addressed
  the applicable CVE (CVE-2022-25647).
  
  Platforms Affected:
  Windows
  

Problem conclusion

• Resolution Summary:
  Updated Integrated File Agent to version 2.0.0.0_iFix028.
  
  Delivered In:
  Sterling Connect:Direct for Windows 6.2.0.4_iFix012
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR CD FOR WIND

• Fixed component ID

  5725C9908

Applicable component levels