IBM Security Bulletin: IBM® Java™ SDK Technology Edition, Apr 2019, affects IBM Security Identity Manager Virtual Appliance

There are multiple vulnerabilities in IBM® Java SDK Technology Edition, Apr 2019, used by IBM Security Identity Manager Virtual Appliance. IBM Security Identity Manager Virtual Appliance has addressed the applicable CVEs.

CVE(s): CVE-2019-10245, CVE-2019-2684, CVE-2019-2602

Affected product(s) and affected version(s):

Product	Version
IBM Security Identity Manager VA	7.0.1 – 7.0.1.12

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10958087
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/160010
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/159776
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/159698

The post IBM Security Bulletin: IBM® Java™ SDK Technology Edition, Apr 2019, affects IBM Security Identity Manager Virtual Appliance appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2XB9bc8