IBM Security Bulletin: Vulnerability in IBM WebSphere Application Server affects Tivoli Storage Productivity Center (CVE-2017-1382)
A vulnerability in IBM WebSphere Application Server affects Tivoli Storage Productivity Center. WebSphere Application Server may have insecure file permissions after custom startup scripts are run. The custom startup script will not pull the umask from the server.xml. This may cause some log files to have different permissions then expected. Tivoli Storage Productivity Center has addressed the applicable CVE.
CVE(s): CVE-2017-1382
Affected product(s) and affected version(s):
Tivoli Storage Productivity Center 5.1.0 through 5.1.1.14
The versions listed above apply to all licensed offerings of Tivoli Storage Productivity Center.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2fgsNCk
X-Force Database: http://ift.tt/2uQ5lBY
The post IBM Security Bulletin: Vulnerability in IBM WebSphere Application Server affects Tivoli Storage Productivity Center (CVE-2017-1382) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2fgsO9m