News and Updates

News and UpdatesInfrared3602018-05-28T21:14:42-04:00

AVADA SOFTWARE AT A GLANCE

Avada Software’s flagship product, Infrared360®, is an IT management portal providing total administration, monitoring, testing, auditing, analytics dashboards, and self-service for cloud, on-prem, or hybrid environments. Get secure, collaborative management of elements across your IT stack like Kafka^®, IBM^® MQ, IBM^® ACE/IIB, ActiveMQ^®, WebSphere^®, JBoss^®, and Tomcat^®Application Servers, URLs, SOAP & REST-based web services, IBM^® DataPower^® and MQ Appliance.

Latest Insight

Tweets by AvadaSoftware

The Middleware Blog

John Ghilino2022-07-18T14:57:13-04:00July 14th, 2022|

IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7. (CVE-2021-35603)

Summary

IBM MQ Internet Pass-Thru has addressed the following vulnerability in the IBM® Runtime Environment Java™ Technology Edition, Version 7 used by IBM MQ Internet Pass-Thru.

Vulnerability Details

CVEID: CVE-2021-35603 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component […]

IBM MQ What’s New: Innovation and Evolution
Gallery
IBM MQ What’s New: Innovation and Evolution

IBM Community, Infrared360® Blog

Scott Treggiari2022-07-11T16:12:10-04:00July 11th, 2022|

IBM MQ What’s New: Innovation and evolution

Thu, Aug 4, 2022 10:00 AM EDT

Join us to learn about how IBM MQ is continuously innovating and evolving to meet a growing need in messaging. We’ll introduce you to many of the recent innovations to MQ, showing how MQ is the right solution across any platform or environment, whether cloud, on-premise or hybrid.

Key Speakers David Ware – IBM MQ […]

John Ghilino2024-12-09T10:55:22-05:00July 11th, 2022|

IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to loss of confidentiality due to CVE-2021-4189

Summary

Python is included in the DesignerAuthoring component when Mapping Assist is enabled. The Python FTP module is vulnerable due to CVE-2021-4189. IBM App Connect Enterprise Certified Container is not directly vulnerable under standard operations, but custom use of the images may be vulnerable to loss of confidentiality. This […]

John Ghilino2022-07-20T19:46:32-04:00July 8th, 2022|

IBM App Connect Enterprise and IBM Integration Bus are vulnerable to arbitrary code execution due to node.js minimist module ( CVE-2022-44906)

Summary

IBM App Connect Enterprise and IBM Integration Bus are vulnerable to arbitrary code execution due to the node.js minimist module ( CVE-2022-44906). A mitigation has been provided for IBM Integration Bus. The latest fix packs for IBM […]

More Than Half of DevOps Pros Have Backdoor Access to IT Infrastructure
Gallery
More Than Half of DevOps Pros Have Backdoor Access to IT Infrastructure

Infrared360® Blog, IT Infrastructure

John Ghilino2022-07-06T21:16:30-04:00July 6th, 2022|

A survey of 600 DevOps professionals found nearly two-thirds (64%) had productivity impacted on a daily or weekly basis because of infrastructure access issues. It’s not surprising that, as a result, DevOps teams created a number of workarounds to gain access to infrastructure, even though those methods don’t comply with cybersecurity best practices, according to the survey. More than half of respondents (55%) maintained backdoor access to […]

Scott Treggiari2024-11-20T16:30:00-05:00July 5th, 2022|

IBM ACE and IBM Integration Bus Vulnerabilities, due to due to node.js minimist module, were announced:

IBM App Connect Enterprise and IBM Integration Bus are vulnerable to arbitrary code execution due to the node.js minimist module ( CVE-2022-44906). A mitigation has been provided for IBM Integration Bus. The latest fix packs for IBM App Connect Enterprise includes minimist 1.2.6 Vulnerability Details CVEID: CVE-2021-44906 DESCRIPTION: Node.js Minimist module […]