IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Financial Transaction Manager for ACH Services, Check Services and Corporate Payment Services

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7. that is used by Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services. These issues were disclosed as part of the IBM Java SDK updates in Jan 2017.

CVE(s): CVE-2016-5546, CVE-2016-5548, CVE-2016-5549, CVE-2016-5547, CVE-2016-2183

Affected product(s) and affected version(s):

– FTM for ACH Services v3.0.0.0 – 3.0.0.15

– FTM for Check Services v3.0.0.0 – 3,00.15

– FTM for CPS v3.0.0.0 – 3.0.0.15

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2nMO8pY
X-Force Database: http://ift.tt/2lA4akm
X-Force Database: http://ift.tt/2lAx183
X-Force Database: http://ift.tt/2msD77U
X-Force Database: http://ift.tt/2msBF5I
X-Force Database: http://ift.tt/2dR3VyC

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Financial Transaction Manager for ACH Services, Check Services and Corporate Payment Services appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2phxifJ