IBM Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty affects IBM Watson Compare and Comply on IBM Cloud Private

There is a potential denial of service with the Google Guava library that is used in WebSphere Application Server Liberty which in turn is used by IBM Watson Compare and Comply on IBM Cloud Private.

CVE(s): CVE-2018-10237

Affected product(s) and affected version(s):
This vulnerability affects IBM Watson Compare and Comply V1.0.4 through V1.1.3.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10876202
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/142508

The post IBM Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty affects IBM Watson Compare and Comply on IBM Cloud Private appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2FGApHa