IBM Security Bulletin: Multiple Vulnerabilities in IBM Runtime Environments Java Technology Edition, Versions 7 & 8 Affect Transformation Extender

Sep 26, 2018 9:01 am EDT

Categorized: High Severity

Share this post:

There are multiple vulnerabilities in IBM® Runtime Environments Java™ Technology Edition versions 7 & 8 that are used by Transformation Extender. These issues were disclosed as part of the IBM Java SDK updates in March 2018, May 2018, and July 2018.

CVE(s): CVE-2018-1656, CVE-2018-12539, CVE-2018-2602, CVE-2018-2783, CVE-2018-2800

Affected product(s) and affected version(s):

• Transformation Extender Design Studio
• Transformation Extender with Command Server
• Transformation Extender for Integration Servers
• Transformation Extender for Application Programming
• Transformation Extender with Launcher

Transformation Extender Versions	CVE IDs
9.0.0 – 9.0.0.3 8.4.1 – 8.4.1.5	CVE-2018-1656 (CVSS 7.4) CVE-2018-12539 (CVSS 8.4) CVE-2018-2602 (CVSS 4.5) CVE-2018-2783 (CVSS 7.4) CVE-2018-2800 (CVSS 4.2)

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10720173
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144882
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148389
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141939
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141956

from IBM Product Security Incident Response Team https://ift.tt/2QXx37v