IBM Security Bulletin: Security vulnerability in Apache affects IBM InfoSphere Master Data Management (CVE-2017-12624)

Oct 17, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

IBM InfoSphere Master Data Management is vulnerable to an Apache CXF denial of service which could allow a remote attacker to to cause the AX-WS and JAX-RS services to stop responding.

CVE(s): CVE-2017-12624

Affected product(s) and affected version(s):

This vulnerability is known to affect the following offerings:

Affected IBM Initiate Master Data Management	Affected Versions
IBM InfoSphere Master Data Management	11.5
IBM InfoSphere Master Data Management	11.6

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10735065
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/135095

from IBM Product Security Incident Response Team https://ift.tt/2OyVV8k