IBM License Metric Tool (ILMT)

IBM License Metric Tool (ILMT)

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  IBM Java 6.0, 7.0 and 7.1 Vulnerability in ILMT.

    Posted Wed August 02, 2023 08:08 PM

    Hi, we are running ILMT 9.2.30 on Windows and receiving a vulnerability alert from the security team about IBM Java 6.0, 7.0 and 7.1.    Please see sample screenshot.  Can you  point me to what to fix this issue?   Thanks.



    ------------------------------
    York Ly
    ------------------------------


  • 2.  RE: IBM Java 6.0, 7.0 and 7.1 Vulnerability in ILMT.

    Posted Thu August 03, 2023 03:03 AM

    Hello York,

    Definitely there is something wrong with that vulnerability discovery tool.
    It says that Java 'Installed version' is 8.0.0 
    Pretty archaic so to speak....


    This Fixed version (8.0.4.10) is from 2017/08/03
    ILMT 9.2.30 uses 8.0-7.20



    ------------------------------
    Thank you,
    Oktawian

    Oktawian Powązka, L3 Support
    IBM License Metric Tool
    ------------------------------



  • 3.  RE: IBM Java 6.0, 7.0 and 7.1 Vulnerability in ILMT.

    Posted Sat August 12, 2023 10:04 AM

    Thanks Oktawian,  let me try to get more detail on which binary file is getting/scanning the java version from.   Will let you know once I have that information.



    ------------------------------
    York Ly
    ------------------------------