IBM Security Bulletin: Vulnerability in IBM® Runtime Environments Java™ Technology Edition, Versions 6, 7, 8 affect Transformation Extender Design Studio (CVE-2016-3426)

There is a vulnerability in IBM® Runtime Environments Java™ Technology Edition, Versions 6, 7, 8 that are used by Transformation Extender Design Studio. This issue was disclosed as part of the IBM Java SDK updates in April 2016.

CVE(s): CVE-2016-3426

Affected product(s) and affected version(s):

Transformation Extender Design Studio
Affected versions:

• 9.0.0.0

WebSphere Transformation Extender Design Studio
Affected versions:

• 8.3.0.0 – 8.3.0.6
• 8.4.0.0 – 8.4.0.5
• 8.4.1.0 – 8.4.1.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2dmWRXU
X-Force Database: http://ift.tt/1N2N2xe

from IBM Product Security Incident Response Team http://ift.tt/2dmX0u7