A vulnerability in IBM WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center). There is a potential spoofing attack in WebSphere Application Server using Form Login. IBM Spectrum Control has addressed the applicable CVE.
CVE(s): CVE-2017-1788
Affected product(s) and affected version(s):
The versions listed above apply to all licensed offerings of IBM Spectrum Control.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22014729
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137031
The post IBM Security Bulletin: Vulnerability in IBM WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) CVE-2017-1788 appeared first on IBM PSIRT Blog.
| Affected Product | Affected Versions |
| IBM Tivoli Storage Productivity Center | 5.2.0 – 5.2.7.1 |
| IBM Spectrum Control | 5.2.8 – 5.2.16 |
from IBM Product Security Incident Response Team https://ift.tt/2KRSUte
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.