IBM Security Bulletin: Multiple vulnerabilities in Node.js affects IBM API Connect (CVE-2016-7099, CVE-2016-5325)

IBM API Connect is affected by three vulnerabilities in Node.js (CVE-2016-7099, CVE-2016-5325 and one for which a CVE ID was not assigned.) These vulnerabilities are now fixed.

CVE(s): CVE-2016-7099, CVE-2016-5325,

Affected product(s) and affected version(s):

IBM API Connect V5.0.0 – V5.0.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ovped3
X-Force Database: http://ift.tt/2dckDn3
X-Force Database: http://ift.tt/2e5C4fq
X-Force Database: http://ift.tt/2gwBF0V

The post IBM Security Bulletin: Multiple vulnerabilities in Node.js affects IBM API Connect (CVE-2016-7099, CVE-2016-5325) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2ovC4Ib