Main Vulnerability Database SB2022032027

SB2022032027 - IBM Sterling Control Center update for Java SE Embedded

Published: March 20, 2022

Security Bulletin ID SB2022032027

Severity

Low

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Data manipulation

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper input validation (CVE-ID: CVE-2020-14782)

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The vulnerability exists due to an error in CertPath implementation within the Libraries component in Java SE Embedded. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.

Remediation

Install update from vendor's website.

References

https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-in-java-se-related-to-the-libraries-component-affects-ibm-control-center-cve-2020-14782/"
https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-in-java-se-related-to-the-libraries-component-affects-ibm-control-center-cve-2020-14782/</a>
https://www.ibm.com/support/pages/node/6564767