IBM Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple cURL/libcURL vulnerabilities (CVE-2016-5419, CVE-2016-5420, CVE-2016-7141)

Multiple security vulnerabilities have been identified in cURL/libcURL that is embedded in IBM FSM. This bulletin addresses these issues.

CVE(s): CVE-2016-5419, CVE-2016-5420, CVE-2016-7141

Affected product(s) and affected version(s):

Flex System Manager 1.3.4.0
Flex System Manager 1.3.3.0
Flex System Manager 1.3.2.1
Flex System Manager 1.3.2.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ku36eV
X-Force Database: http://ift.tt/2kdL4xr
X-Force Database: http://ift.tt/2j0IwpD
X-Force Database: http://ift.tt/2kdKq2X

The post IBM Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple cURL/libcURL vulnerabilities (CVE-2016-5419, CVE-2016-5420, CVE-2016-7141) appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2ku6CWr