IBM Security Bulletin: Weakness in generated service credentials affects multiple Watson Developer Cloud services (CVE-2016-0931)
A weakness in generated service credentials that affects multiple Watson Developer Cloud offered through IBM Bluemix has been identified and fixed. Replacement of previously generated credentials is recommended.
CVE(s): CVE-2016-0391
Affected product(s) and affected version(s):
The following Watson Developer Cloud Services on Bluemix are affected:
– Concept Expansion
– Concept Insights
– Dialog
– Document Conversion
– Language Translation
– Natural Language Classifier
– Personality Insights
– Relationship Extraction
– Retrieve and Rank
– Speech to Text
– Text to Speech
– Tone Analyzer
– Tradeoff Analytics
– Visual Insights
– Visual Recognition
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/28KXc4N
X-Force Database: http://ift.tt/28Lw1ua
from IBM Product Security Incident Response Team http://ift.tt/28KXaKe