IBM Security Bulletin: Security vulnerabilities in IBM Java Runtime affect IBM RLKS Administration and Reporting Tool Admin
Jan 3, 2019 9:01 am EST
Categorized: Medium Severity
Share this post:
There are multiple vulnerabilities related to IBM® Runtime Environment Java™ Technology Edition which is used and shipped by different versions of IBM Rational License Key Server Administration and Reporting Tool Admin (ART).
CVE(s): CVE-2018-3180, CVE-2018-2973, CVE-2018-2940, CVE-2017-3736, CVE-2017-3732, CVE-2016-0705
Affected product(s) and affected version(s):
- RLKS Administration and Reporting Tool version 8.1.5
- RLKS Administration and Reporting Tool version 8.1.5.1
- RLKS Administration and Reporting Tool version 8.1.5.2
- RLKS Administration and Reporting Tool version 8.1.5.3
- RLKS Administration and Reporting Tool version 8.1.5.4
- RLKS Administration and Reporting Tool version 8.1.5.5
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10791413
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146803
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/121313
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111140
from IBM Product Security Incident Response Team https://ibm.co/2QhI1mZ