IBM Security Bulletin: Vulnerabilities in node.js processing affect IBM DataPower Gateways

IBM DataPower Gateways has addressed vulnerabilities in Node.js V8 processing that could cause a denial of service or remote code execution.

CVE(s): CVE-2016-1669

Affected product(s) and affected version(s):

IBM DataPower Gateways appliances all supported versions through 7.0.0.14, 7.1.0.11, 7.2.0.8, 7.5.0.2, and 7.5.1.1.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2cEENJ8
X-Force Database: http://ift.tt/29qowH9



from IBM Product Security Incident Response Team http://ift.tt/2cEFHWa