IBM Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2018-8014, CVE-2018-8019, CVE-2018-8020, CVE-2018-8034)

Multiple vulnerabilities in Open Source Apache Tomcat reported by The Apache Software Foundation affect IBM Tivoli Application Dependency Discovery Manager

CVE(s): CVE-2018-8014, CVE-2018-8019, CVE-2018-8020, CVE-2018-8034

Affected product(s) and affected version(s):

TADDM 7.2.2.0 – 7.2.2.5
TADDM 7.3.0.0 (TADDM 7.3.0.1-5 – not affected – they use WebSphere Liberty Profile)

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10729713
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143411
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147688
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147687
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147211

The post IBM Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2018-8014, CVE-2018-8019, CVE-2018-8020, CVE-2018-8034) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2MuLkVV