IBM Security Bulletin: IBM Spectrum Control (formerly IBM Tivoli Storage Productivity Center) is affected by a vulnerability in Apache CXF (CVE-2017-12624)

A vulnerability in Apache CXF was disclosed which affects IBM Spectrum Control (formerly IBM Tivoli Storage Productivity Center). There is a potential denial of service in Apache CXF that is used by WebSphere Application Server, which has addressed the applicable CVE.

CVE(s): CVE-2017-12624

Affected product(s) and affected version(s):

The versions listed above apply to all licensed offerings of IBM Spectrum Control.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22014053
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/135095

The post IBM Security Bulletin: IBM Spectrum Control (formerly IBM Tivoli Storage Productivity Center) is affected by a vulnerability in Apache CXF (CVE-2017-12624) appeared first on IBM PSIRT Blog.

Affected Product	Affected Versions
IBM Tivoli Storage Productivity Center	5.2.0 – 5.2.7.1
IBM Spectrum Control	5.2.8 – 5.2.16

from IBM Product Security Incident Response Team https://ift.tt/2KRSBi4