Number: AV22-133
Date: 14 March 2022
Between 7 and 13 March 2022 IBM published Security Bulletins to address vulnerabilities in multiple products. Included were critical updates for the following:
- IBM Cloud Application Business Insights – versions 1.1.5 to 1.1.7
- IBM Cloud Pak System – version 2.3
- IBM Cloud Pak System Software Suite – version 2.3.3.0
- IBM Spectrum Control – versions 5.4.0 to 5.4.5.2
The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.
IBM – Apache Log4j Vulnerability
IBM Product Security Incident Response
Active Exploitation of Apache Log4j Vulnerability (AL21-019)