No Patch for High-Severity Bug in Legacy IBM System X Servers
Two of IBM’s aging flagship server models, retired in 2020, won’t be patched for a command-injection flaw.
Category: IBM
IBM urges infosec pros to patch DB2 for Windows, Cisco urges patches for Webex Meetings
IBM is warning infosec pros of a hijacking vulnerability in its DB2 database on Windows. In a security bulletin issued Thursday, the company said the issue could allow a locally authenticated attacker to execute arbitrary code...
IBM Spectrum Protect Plus Security Open to RCE
Two bugs (CVE-2020-4703 and CVE-2020-4711) in IBM’s Spectrum Protect Plus data-storage protection solution could enable remote code execution.
Shared memory vulnerability in IBM’s Db2 database could let nefarious insiders wreak havoc – so get patching
Lack of protections around trace facility gives local users read and write access A bug-hunter has uncovered a vulnerability in IBM’s popular enterprise database which, if left unpatched, could allow a local user to access...
Vulnerability in IBM Db2 Leads to Information Disclosure, Denial of Service
A shared memory vulnerability that IBM addressed in its Db2 data management products could allow malicious local users to access sensitive data. read more
Experts Reported Security Bug in IBM’s Db2 Data Management Software
Cybersecurity researchers today disclosed details of a memory vulnerability in IBM’s Db2 family of data management products that could potentially allow a local attacker to access sensitive data and even cause a denial of...
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug report
IT giant admits it made ‘a process error, improper response’ to flaw finder IBM has acknowledged that it mishandled a bug report that identified four vulnerabilities in its enterprise security software, and plans to...
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug report
IT giant admits it made ‘a process error, improper response’ to flaw finder IBM has acknowledged that it mishandled a bug report that identified four vulnerabilities in its enterprise security software, and plans to...
RCE Exploit Released for IBM Data Risk Manager, No Patch Available
Three separate flaws can be chained to achieve full system compromise.
