Security Bulletin: Vulnerability in Apache Ant affects IBM Platform Symphony and IBM Spectrum Symphony

Sep 7, 2020 8:00 pm EDT

Categorized: Medium Severity

Share this post:

These interim fixes provide instructions on upgrading Apache Ant to 1.10.8 in IBM Platform Symphony 7.1 Fix Pack 1, IBM Platform Symphony 7.1.1, IBM Spectrum Symphony 7.1.2, IBM Spectrum Symphony 7.2.0.2, IBM Spectrum Symphony 7.2.1, and IBM Spectrum Symphony 7.3 in order to address security vulnerability CVE-2020-1945 in Apache Ant.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Spectrum Symphony	7.3
IBM Spectrum Symphony	7.2.1
IBM Spectrum Symphony	7.2.0.2
IBM Spectrum Symphony	7.1.2
IBM Platform Symphony	7.1.1
IBM Platform Symphony	7.1 Fix Pack 1

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6327149

from IBM Product Security Incident Response Team https://ift.tt/3i9ZqN9