I saw the same, couldn't come up with any details on any of the 3 CVE vuln
numbers... i'm mainly looking for the defined severity level (critical,
high, etc.) as a first step to evaluate...
From: "Dan Bale" <dan.bale@xxxxxxxxxxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion"
<midrange-l@xxxxxxxxxxxxxxxxxx>
Date: 12/08/2023 11:43 AM
Subject: RE: FLASH: Security Bulletin: IBM i Access Client Solutions is
vulnerable to remote code execution and failing to secure
passwords due to multiple vulnerabilities (2023.12.08)
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>
Clicking all three of those CVEs return "No results can be retrieved by
using the search term." but you can search for them on the site.
Unfortunately, there is no information on any of those three CVEs.
Anyone know whether the vulns require physical access to the client?
Dan Bale
Specialty Developer III
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Michael Mayer
Sent: Friday, December 8, 2023 11:00 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Cc: Michael Mayer <
https://urldefense.proofpoint.com/v2/url?u=http-3A__michael.mayer-40ermco-2Deci.com&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=FaHmtsrlv1gHUX-sfadM4FPhmi77DyRJDjh8NvpP6sE&m=F5U7pVfrp6R73sPQHefk3GPXrjxydkmTU4IxV5-TtClhhkPFHUm1MutLelo6eZwz&s=3Ufdu7FNlp2fVuRU8-nzhdGOq6fXrqstffG2mLjKZ88&e=
Subject: FW: FLASH: Security Bulletin: IBM i Access Client Solutions is
vulnerable to remote code execution and failing to secure passwords due to
multiple vulnerabilities (2023.12.08)
Importance: High
I just received this notification. As I'm reading it, the remediation
instructions show new version of ACS
https://urldefense.proofpoint.com/v2/url?u=http-3A__1.1.9.4&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=FaHmtsrlv1gHUX-sfadM4FPhmi77DyRJDjh8NvpP6sE&m=F5U7pVfrp6R73sPQHefk3GPXrjxydkmTU4IxV5-TtClhhkPFHUm1MutLelo6eZwz&s=Y05n4-CbZhPfpJbCrkB-Fn8djhFA9Ps1hE59IT7nwDc&e=
.
<snip>
I can't speak for anyone else but most of us here are more than aware of
the goings on in IBM i nation. I don't recall seeing anything about ACS
https://urldefense.proofpoint.com/v2/url?u=http-3A__1.1.9.4&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=FaHmtsrlv1gHUX-sfadM4FPhmi77DyRJDjh8NvpP6sE&m=F5U7pVfrp6R73sPQHefk3GPXrjxydkmTU4IxV5-TtClhhkPFHUm1MutLelo6eZwz&s=Y05n4-CbZhPfpJbCrkB-Fn8djhFA9Ps1hE59IT7nwDc&e=
. Anyone else??
<snip>
*** CONFIDENTIALITY NOTICE: The information contained in this communication
may be confidential, and is intended only for the use of the recipients
named above. If the reader of this message is not the intended recipient,
you are hereby notified that any dissemination, distribution, or copying of
this communication, or any of its contents, is strictly prohibited. If you
have received this communication in error, please return it to the sender
immediately and delete the original message and any copy of it from your
computer system. If you have any questions concerning this message, please
contact the sender. ***
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.midrange.com_mailman_listinfo_midrange-2Dl&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=FaHmtsrlv1gHUX-sfadM4FPhmi77DyRJDjh8NvpP6sE&m=F5U7pVfrp6R73sPQHefk3GPXrjxydkmTU4IxV5-TtClhhkPFHUm1MutLelo6eZwz&s=8A2PgvA5rzoJOiWjkrPU7CiIrt3rB7F45rGsOZA2VvA&e=
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://urldefense.proofpoint.com/v2/url?u=https-3A__archive.midrange.com_midrange-2Dl&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=FaHmtsrlv1gHUX-sfadM4FPhmi77DyRJDjh8NvpP6sE&m=F5U7pVfrp6R73sPQHefk3GPXrjxydkmTU4IxV5-TtClhhkPFHUm1MutLelo6eZwz&s=_RVQfaKPEnOQS-zfJB-fw7_6A0EvNLzNknbcQzNq7SQ&e=
.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
midrange.com
