IT42991: MULTIPLE VULNERABILITIES IN IBM JAVA RUNTIME AND ECLIPSE OPENJ9 AFFECT STERLING C:DWINDOWS (CVE-2022-3676, CVE-2022-21626)

6.2.0.8-IBMConnectDirectRequesterStandAlone-x86-fp0008-if011
6.2.0.8-IBMConnectDirectSDK-x64-fp0008-if011
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if011
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if005
6.2.0.8-IBMConnectDirectSDK-x64-fp0008
6.2.0.8-IBMConnectDirectRequesterStandAlone-x86-fp0008
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008
6.2.0.7-IBMConnectDirectSDK-x64-fp0007
6.2.0.7-IBMConnectDirectRequesterStandAlone-x86-fp0007
6.2.0.7-IBMConnectDirectforMicrosoftWindows-x64-fp0007
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if048
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if106
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if044
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if104
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if043
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if103
6.2.0.6-IBMConnectDirectSDK-x64-fp0006-if039
6.2.0.6-IBMConnectDirectRequesterStandAlone-x86-fp0006-if039
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if039
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if100
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if100
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if100
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if033
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if095
6.2.0.6-IBMConnectDirectSDK-x64-fp0006-if028
6.2.0.6-IBMConnectDirectRequesterStandAlone-x86-fp0006-if028
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if028
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if094
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if094
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if094
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if025
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if024
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if090
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if089
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if023
6.2.0.6-IBMConnectDirectSDK-x64-fp0006-if022
6.2.0.6-IBMConnectDirectRequesterStandAlone-x86-fp0006-if022
6.0.0.4-IBMConnectDirectSDK-x64-fp0004-if088
6.0.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if088
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if088
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if087
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if087
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if087
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if018
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if015
6.2.0.6-IBMConnectDirectSDK-x64-fp0006-if014
6.2.0.6-IBMConnectDirectRequesterStandAlone-x86-fp0006-if014
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if014
6.0.0.4-IBMConnectDirectSDK-x64-fp0004-if087
6.0.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if087
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if087
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if083
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if083
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if083
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if009
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if081
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if084
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if079
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if079
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if079
6.2.0.6-IBMConnectDirectSDK-x64-fp0006-if007
6.2.0.6-IBMConnectDirectRequesterStandAlone-x86-fp0006-if007
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if007
6.0.0.4-IBMConnectDirectSDK-x64-fp0004-if083
6.0.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if083
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if083
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if004
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if077
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if081
6.2.0.6-IBMConnectDirectSDK-x64-fp0006
6.2.0.6-IBMConnectDirectRequesterStandAlone-x86-fp0006
6.2.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006
6.2.0.5-IBMConnectDirectSDK-x64-fp0005
6.2.0.5-IBMConnectDirectRequesterStandAlone-x86-fp0005
6.2.0.5-IBMConnectDirectforMicrosoftWindows-x64-fp0005
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if046
6.0.0.4-IBMConnectDirectSDK-x64-fp0004-if073
6.0.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if073
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if073
6.2.0.4-IBMConnectDirectSDK-x64-fp0004-if045
6.2.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if045
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if045
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if069
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if069
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if069
6.2.0.4-IBMConnectDirectSDK-x64-fp0004-if040
6.2.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if040
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if064
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if040
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if064
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if064
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if069
6.0.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if069
6.0.0.4-IBMConnectDirectSDK-x64-fp0004-if069
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if038
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if037
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if063
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if068
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if057
4.8.0.3-SterlingConnectDirectRequesterStandAlone-x86-fp0003-if057
4.8.0.3-SterlingConnectDirectSDK-x86-fp0003-if057
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if028
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if057
4.8.0.3-SterlingConnectDirectSDK-x86-fp0003-if053
4.8.0.3-SterlingConnectDirectRequesterStandAlone-x86-fp0003-if053
4.8.0.3-SterlingConnectDirectforMicrosoftWindows-x86-fp0003-if053
6.0.0.4-IBMConnectDirectSDK-x64-fp0004-if061
6.0.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if061
6.0.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if061
6.1.0.2-IBMConnectDirectSDK-x64-fp0002-if056
6.1.0.2-IBMConnectDirectRequesterStandAlone-x86-fp0002-if056
6.1.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if056
6.2.0.4-IBMConnectDirectSDK-x64-fp0004-if022
6.2.0.4-IBMConnectDirectRequesterStandAlone-x86-fp0004-if022
6.2.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if022

APAR status

• Closed as program error.

Error description

• Vulnerabilities have been found in the IBM Runtime Environment
  Java Technology Edition, Version 8 and in Eclipse OpenJ9 used by
   IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling
   Connect:Direct for Microsoft Windows has addressed the
  applicable CVEs.
  

Local fix

• STRMFT-13869,MFT-13997
  VF / VF
  Circumvention: None
  

Problem summary

• Users Affected:
  Sterling Connect:Direct for Windows 4.8.0
  Sterling Connect:Direct for Windows 6.0.0
  Sterling Connect:Direct for Windows 6.1.0
  Sterling Connect:Direct for Windows 6.2.0
  
  Problem Description:
  Vulnerabilities have been found in the IBM Runtime Environment
  Java Technology Edition, Version 8 and in Eclipse OpenJ9 used by
  IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling
  Connect:Direct for Microsoft Windows has addressed the
  applicable CVEs.
  
  Platforms Affected:
  Windows
  

Problem conclusion

• Resolution Summary:
  Updated the IBM Runtime Environment Java to version 8.0.7.20.
  
  Delivered In:
  Sterling Connect:Direct for Windows 4.8.0.3_iFix053
  Sterling Connect:Direct for Windows 6.0.0.4_iFix061
  Sterling Connect:Direct for Windows 6.1.0.2_iFix055
  Sterling Connect:Direct for Windows 6.2.0.4_iFix021
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR CD FOR WIND

• Fixed component ID

  5725C9908

Applicable component levels