IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software (CVE-2018-1000168, CVE-2018-7161)

Multiple Node.js vulnerabilities were disclosed by the Node.js project. Node.js is used by the Cordova tools in IBM Rational Application Developer for WebSphere Software. IBM Rational Application Developer for WebSphere Software has addressed the applicable CVEs.

CVE(s): CVE-2018-1000168, CVE-2018-7161

Affected product(s) and affected version(s):

Rational Application Developer 9.6.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10728705
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141584
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144736

The post IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software (CVE-2018-1000168, CVE-2018-7161) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2PHZQMQ