Rewterz
Rewterz Threat Alert – Loki Password Stealer (PWS) – IOCs
August 10, 2021
Rewterz
Rewterz Threat Advisory –CVE-2021-38166 – Linux Kernel Integer Overflow Vulnerability
August 10, 2021

Rewterz Threat Advisory –Multiple IBM Security Vulnerabilities

Severity

High

Analysis Summary

CVE-2021-29714

IBM Content Navigator could allow a malicious user to cause a denial of service due to improper input validation.

CVE-2021-20349

IBM Tivoli Workload Scheduler is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges.

Impact

  • Denial of Service
  • Unauthorized Access

Affected Vendors

IBM

Affected Products

  • IBM Content Navigator 3.0.CD
  • IBM Workload Scheduler 9.4
  • IBM Workload Scheduler 9.5

Remediation

Refer to IBM Security Bulletin for patch, upgrade or suggested workaround information.

https://www.ibm.com/support/pages/node/6479347