IBM Security Bulletin: Vulnerabilities in OpenSource Spring Source/Pivotal Spring Framework affect IBM Tivoli Netcool Configuration Manager (ITNCM) (CVE-2013-7315, CVE-2013-4152, CVE-2014-0054)

There are a number of potential security vulnerabilities in OpenSource Spring Source/Pivotal Spring Framework, that is used by IBM Tivoli Netcool Configuration Manager (ITNCM).

CVE(s): CVE-2013-7315, CVE-2013-4152, CVE-2014-0054

Affected product(s) and affected version(s):

The following releases are affected:

ITNCM 6.4.2.0 – 6.4.2.3

ITNCM 6.4.1.0 – 6.4.1.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2lLwPUj
X-Force Database: http://ift.tt/2e1fwwv
X-Force Database: http://ift.tt/2eeIMvh
X-Force Database: http://ift.tt/2eeHjVR

The post IBM Security Bulletin: Vulnerabilities in OpenSource Spring Source/Pivotal Spring Framework affect IBM Tivoli Netcool Configuration Manager (ITNCM) (CVE-2013-7315, CVE-2013-4152, CVE-2014-0054) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2mlrq2T