IBM Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java affect IBM PureApplication System

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM PureApplication System. These issues were disclosed as part of the IBM Java SDK updates in Jan 2017. IBM PureApplication System has addressed the applicable CVEs. These issues were also addressed by IBM WebSphere Application Server shipped with IBM PureApplication System.

CVE(s): CVE-2017-3241, CVE-2016-5546, CVE-2016-5548, CVE-2016-5549, CVE-2017-3252, CVE-2016-5552, CVE-2016-5547, CVE-2016-2183

Affected product(s) and affected version(s):

IBM PureApplication System V2.2
IBM PureApplication System V2.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2szjpvl
X-Force Database: http://ift.tt/2lAcror
X-Force Database: http://ift.tt/2lA4akm
X-Force Database: http://ift.tt/2lAx183
X-Force Database: http://ift.tt/2msD77U
X-Force Database: http://ift.tt/2lAk4Lp
X-Force Database: http://ift.tt/2lAiqcB
X-Force Database: http://ift.tt/2msBF5I
X-Force Database: http://ift.tt/2dR3VyC

The post IBM Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java affect IBM PureApplication System appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2s0jlYo