IBM Security Bulletin: Multiple vulnerabilites in IBM Java Runtime affect IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware on Windows (CVE-2016-3485)

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition that is used by IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (IBM Spectrum Protect™ for Virtual Environments). These issues were disclosed as part of the IBM Java SDK updates in July 2016.

CVE(s): CVE-2016-3485

Affected product(s) and affected version(s):

The following levels of IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (IBM Spectrum Protect for Virtual Environments) are affected on the Windows platform:

• 7.1.0.0 through 7.1.6.3
• 6.4.0.0 through 6.4.3.4
• 6.3.0.0 through 6.3.2.7

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hDXkbV
X-Force Database: http://ift.tt/2b7G65u

from IBM Product Security Incident Response Team http://ift.tt/2hDRYxj