IBM Security Bulletin: Rational Build Forge Security Advisory for Apache HTTPD, Apache Tomcat and OpenSSL Upgrade

Apache HTTPD, Apache Tomcat and OpenSSL have security vulnerabilities that allows a remote attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections.

CVE(s): CVE-2017-7679, CVE-2017-7668, CVE-2017-7659, CVE-2017-3169, CVE-2017-3167, CVE-2017-5664, CVE-2017-7674, CVE-2017-12617, CVE-2017-12616, CVE-2017-12615, CVE-2017-3735, CVE-2017-3736

Affected product(s) and affected version(s):

All the versions of IBM Rational Build Forge from 8.0 through 8.0.0.5.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2kYk32w
X-Force Database: http://ift.tt/2uD0B26
X-Force Database: http://ift.tt/2ucpuPg
X-Force Database: http://ift.tt/2uI86UE
X-Force Database: http://ift.tt/2vSWo8g
X-Force Database: http://ift.tt/2uCTW8a
X-Force Database: http://ift.tt/2tbJRMe
X-Force Database: http://ift.tt/2yKilHk
X-Force Database: http://ift.tt/2zUlbKS
X-Force Database: http://ift.tt/2BtXsCd
X-Force Database: http://ift.tt/2xssacG
X-Force Database: http://ift.tt/2zTVDha
X-Force Database: http://ift.tt/2Dnm0hn

The post IBM Security Bulletin: Rational Build Forge Security Advisory for Apache HTTPD, Apache Tomcat and OpenSSL Upgrade appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2kHORVF