Security Announcements

Apache Log4j Vulnerability – IBM License Metric Tool Following up on their original announcement regarding the Log4j vulnerability, IBM communicated that some of their customers using IBM License Metric Tool (ILMT) might be vulnerable as some of its components are affected by the Log4j vulnerability (CVE-2021-44228). It affects all types

Announcement: Apache Log4j vulnerability We are continuing to inventory IBM products and systems potentially impacted by the reported Apache Log4j vulnerability. As necessary, we are updating to Log4j version 2.15, which fixes the vulnerability, and applying mitigations in the interim. While our inventory and remediation efforts are underway, we are

Announcement: End of Support for IBM MQ 9.1 Many of the world’s most successful companies rely on MQ IBM MQ offers proven, enterprise-grade messaging capabilities that skillfully and safely move information between applications 85% of the Fortune 100¹ 96 of the top 100 global banks² 7 of the top 10

Struts Vulnerability Notification A recent announcement by IBM communicated that a number of our clients may be vulnerable to a security flaw in SFG/B2Bi. This is due to the use of Apache Struts within the product. The main vulnerability seems to be within the HTTP Server adapters therefore, if you