IBM Support

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Database

Created by David Stewart on
Published URL:
https://www.ibm.com/support/pages/node/278039
278039

Security Bulletin


Summary

These potential security vulnerabilities exist in all versions of IBM OpenPages GRC Platform with Database: See Vulnerability Details for CVE IDs.

Vulnerability Details

Customers who have IBM OpenPages GRC Platform with Database are potentially impacted by these vulnerabilities.



CVEID: CVE-2016-0467
DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Security component has no confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109781 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:S/C:N/I:P/A:N)

CVEID: CVE-2016-0499
DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Java VM component has complete confidentiality impact, complete integrity impact, and complete availability impact.
CVSS Base Score: 9
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109777 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C)

Affected Products and Versions

IBM OpenPages GRC Platform with Database 6.2.0
IBM OpenPages GRC Platform with Database 6.2.1
IBM OpenPages GRC Platform with Database 7.0

Remediation/Fixes

The following interim fix addresses all vulnerabilities in all affected OpenPages GRC Platform with Database versions. Download and install the release as soon as practical. The fix and installation instructions are provided at the URL listed below:

PatchDownload URL
IBM OpenPages GRC Platform with Database IF 6http://www.ibm.com/support/docview.wss?uid=swg24042106

Workarounds and Mitigations

None, apply update.

Get Notified about Future Security Bulletins

Subscribe to My Notifications to be notified of important product support alerts like this.

References

Complete CVSS v2 Guide
On-line Calculator v2

Off

Related Information

IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

Change History

02 May 2016: Original version published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.

[{"Product":{"code":"SSFUEU","label":"IBM OpenPages with Watson"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF033","label":"Windows"}],"Version":"7.0;6.2.1;6.2","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
15 June 2018

UID

swg21982461

Page Feedback