IBM Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2018-11784, CVE-2018-8034)

IBM WebSphere Cast Iron Solution has addressed the following vulnerabilities reported in Apache Tomcat v7.

CVE(s): CVE-2018-11784, CVE-2018-8034

Affected product(s) and affected version(s):

WebSphere Cast Iron v 7.0.0.0, v 7.0.0.1 and v 7.0.0.2.

WebSphere Cast Iron v 7.5.0.0, v 7.5.0.1 and v 7.5.1.0.

App Connect Professional v7.5.2.0.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10793575
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/150860
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147211

The post IBM Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2018-11784, CVE-2018-8034) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2TyaSWu