IBM Security Bulletin: A security vulnerability has been identified in the Apache POI, which is vulnerable to Denial of Service. (CVE-2017-12626)

The Apache POI releases earlier to 3.17 version has security vulnerability to exploit the application through denial of service. Respective security vulnerability is discussed in detail in the subsequent sections.

CVE(s): CVE-2017-12626

Affected product(s) and affected version(s):

Rational Asset Manager 7.5.3.2 and earlier.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22014176
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138361

The post IBM Security Bulletin: A security vulnerability has been identified in the Apache POI, which is vulnerable to Denial of Service. (CVE-2017-12626) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2G4jh0j