IBM Security Bulletin: Rational Build Forge Security Advisory (CVE-2016-8610, CVE-2017-6056, CVE-2017-5647, CVE-2017-5648)

Apache Tomcat and OpenSSL have security vulnerabilities that enables an attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections.

CVE(s): CVE-2016-8610, CVE-2017-6056, CVE-2017-5647, CVE-2017-5648

Affected product(s) and affected version(s):

All the versions of IBM Rational Build Forge from 8.0 through 8.0.0.4.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2szfEpx
X-Force Database: http://ift.tt/2hNr07D
X-Force Database: http://ift.tt/2mUuNys
X-Force Database: http://ift.tt/2roExam
X-Force Database: http://ift.tt/2rYhb8o

The post IBM Security Bulletin: Rational Build Forge Security Advisory (CVE-2016-8610, CVE-2017-6056, CVE-2017-5647, CVE-2017-5648) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2s0nJqs