IBM Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal’s dependencies – Cumulative list from June 28, 2018 to December 13, 2018

IBM API Connect has addressed the following vulnerabilities.

CVE(s): CVE-2018-16276, CVE-2018-6554, CVE-2018-15594, CVE-2018-15572, CVE-2018-17182, CVE-2018-10902, CVE-2018-14633, CVE-2018-6555, CVE-2018-3062, CVE-2017-18216, CVE-2018-7603, CVE-2018-12123, CVE-2018-12122, CVE-2018-12121, CVE-2018-12116, CVE-2018-0734, CVE-2018-0732, CVE-2018-16845, CVE-2018-14647, CVE-2018-18314, CVE-2018-18313, CVE-2018-18312, CVE-2018-18311, CVE-2018-13053, CVE-2018-15687, CVE-2018-10880, CVE-2018-13096, CVE-2018-14609, CVE-2018-14617, CVE-2018-5407, CVE-2018-14600, CVE-2018-14599, CVE-2018-14598, CVE-2018-16429, CVE-2018-16428, CVE-2018-1000222, CVE-2018-14618, CVE-2018-5740, CVE-2018-10853, CVE-2018-5391, CVE-2018-9516, CVE-2018-5390, CVE-2018-5711, CVE-2018-10876, CVE-2018-10881, CVE-2018-10882, CVE-2018-13094, CVE-2018-3646, CVE-2018-10877, CVE-2017-13168, CVE-2018-10878, CVE-2018-10879, CVE-2018-12233, CVE-2018-13405, CVE-2018-13406, CVE-2016-7942, CVE-2016-7943, CVE-2018-3639, CVE-2018-3640, CVE-2018-3620, CVE-2018-10021, CVE-2018-10087, CVE-2018-10124, CVE-2018-7755, CVE-2017-5715, CVE-2018-0737, CVE-2018-1152, CVE-2017-18258, CVE-2018-5814, CVE-2018-1116, CVE-2016-10087, CVE-2018-14404, CVE-2018-7185, CVE-2016-9318, CVE-2017-18255, CVE-2018-7183, CVE-2017-15896, CVE-2018-12115, CVE-2018-7159, CVE-2018-7158, CVE-2018-1000168, CVE-2018-7161, CVE-2018-7167, CVE-2018-7160, CVE-2018-3665, CVE-2018-14567, CVE-2018-14680, CVE-2018-14681, CVE-2018-14679, CVE-2018-14682, CVE-2017-7526, CVE-2018-9518, CVE-2018-0495, CVE-2018-1000204, CVE-2017-13695, CVE-2017-18257

Affected product(s) and affected version(s):

IBM API Connect version 5.0.8.0-5.0.8.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10843434
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149198
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149360
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148547
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148546
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/150102
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148627
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/150238
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149361
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146957
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139923
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151407
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153457
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153456
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153452
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152085
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144658
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152681
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/150579
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153589
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153588
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153587
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153586
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145647
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152040
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147436
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145961
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147619
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147627
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152484
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148663
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148661
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148664
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149332
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149333
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148755
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149359
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148131
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149311
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148388
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152645
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147950
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137653
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147834
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147820
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147831
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145959
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148319
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147438
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/136062
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147833
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147832
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144767
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146434
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147005
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/117541
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/117542
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143569
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143570
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148318
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141588
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141640
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141698
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140065
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137054
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141679
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145045
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141432
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144508
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146202
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/124207
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147260
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139783
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/119018
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141329
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140092
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/136225
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148426
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143448
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143449
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141584
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144736
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144740
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143447
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144757
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148541
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147668
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147669
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147667
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147666
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128271
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/154089
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144828
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144557
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131022
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141431

The post IBM Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal’s dependencies – Cumulative list from June 28, 2018 to December 13, 2018 appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2RljNJ3