PT-2022-10868 · Ibm · Ibm I

Published 2022-01-13 · Updated 2022-01-22 · CVE-2021-39056

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM i versions 7.1 through 7.4

Description The Extended Dynamic Remote SQL server (EDRSQL) in IBM i could allow a remote authenticated user to send a specially crafted request and cause a denial of service.

Recommendations For versions 7.1 through 7.4, consider restricting access to the EDRSQL server until a patch is available. As a temporary workaround, consider disabling the EDRSQL service to minimize the risk of exploitation. Restrict access to the EDRSQL server to only necessary users to reduce the attack surface.

Fix

Related Identifiers

CVE-2021-39056

Affected Products

Ibm I

References · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/214537 · Vendor Advisory
• https://ibm.com/support/pages/node/6540294 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39056 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39056 · Vendor Advisory
• https://t.me/cvenotify/25428 · Telegram Post
• https://t.me/cibsecurity/35429 · Telegram Post