IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK 7 affect IBM Systems Director.

There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 7 that is used by IBM Systems Director. These issues were disclosed as part of the IBM Java SDK updates in October 2017.

CVE(s): CVE-2017-10348, CVE-2017-10388

Affected product(s) and affected version(s):

From the IBM System Director command line enter smcli lsver to determine the level of IBM System Director installed.

IBM Systems Director:

• 6.1.0.0
• 6.1.0.1
• 6.1.0.2
• 6.1.0.3
• 6.1.1.1
• 6.1.1.2
• 6.1.1.3
• 6.1.2.0
• 6.1.2.1
• 6.1.2.2
• 6.1.2.3
• 6.2.0.0
• 6.2.0.1
• 6.2.0.2
• 6.2.1.0
• 6.2.1.0
• 6.2.1.1
• 6.2.1.2
• 6.3.0.0
• 6.3.1.0
• 6.3.1.1
• 6.3.2.0
• 6.3.2.1
• 6.3.2.2
• 6.3.3.0
• 6.3.3.1
• 6.3.5.0
• 6.3.6.0
• 6.3.7.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=isg3T1027118
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133777
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133813

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK 7 affect IBM Systems Director. appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2EN0l5w