IBM Security Bulletin: Vulnerabilities in httpd affect Power Hardware Management Console

httpd is used by Power Hardware Management Console (HMC). HMC has addressed the applicable CVEs.

CVE(s): CVE-2017-9798, CVE-2017-12171, CVE-2017-9788, CVE-2017-7679, CVE-2017-3169, CVE-2017-3167, CVE-2017-7668

Affected product(s) and affected version(s):

Version	CVE list
Power HMC V8.8.4.0	CVE-2017-9798, CVE-2017-9788, CVE-2017-7679, CVE-2017-3169, CVE-2017-3167, CVE-2017-12171
Power HMC V8.8.5.0	CVE-2017-9798, CVE-2017-9788, CVE-2017-7679, CVE-2017-3169, CVE-2017-3167, CVE-2017-12171
Power HMC V8.8.6.0	CVE-2017-9798, CVE-2017-9788, CVE-2017-7679, CVE-2017-3169, CVE-2017-3167, CVE-2017-7668
Power HMC V8.8.7.0	CVE-2017-9798, CVE-2017-9788, CVE-2017-7679, CVE-2017-3169, CVE-2017-3167, CVE-2017-7668

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2CFIt8k
X-Force Database: http://ift.tt/2gzpcwg
X-Force Database: http://ift.tt/2CDRxdZ
X-Force Database: http://ift.tt/2zTUO8d
X-Force Database: http://ift.tt/2uD0B26
X-Force Database: http://ift.tt/2vSWo8g
X-Force Database: http://ift.tt/2uCTW8a
X-Force Database: http://ift.tt/2ucpuPg

The post IBM Security Bulletin: Vulnerabilities in httpd affect Power Hardware Management Console appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2Fh6cxp