IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Software Architect and Rational Software Architect for WebSphere Software

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by IBM Rational Software Architect and Rational Software Architect for WebSphere Software.These CVE’s (CVE-2017-10295, CVE-2017-10355, CVE-2017-10293) were disclosed as part of the IBM Java SDK updates in October 2017.

CVE(s): CVE-2017-10295, CVE-2017-10355, CVE-2017-10293

Affected product(s) and affected version(s):

Rational Software Architect 9.6.1 and earlier

Rational Software Architect for WebSphere Software 9.6.1 and earlier

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2D05S7Z
X-Force Database: http://ift.tt/2i3Lmr1
X-Force Database: http://ift.tt/2jyG1s7
X-Force Database: http://ift.tt/2i3qHDg

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Software Architect and Rational Software Architect for WebSphere Software appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2qLVg80