IBM Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2015-5345, CVE-2016-0706, CVE-2016-0714)

There are multiple vulnerabilities (CVE-2015-5345, CVE-2016-0706, CVE-2016-0714) reported in Apache Tomcat v6 that is used by WebSphere Cast Iron Solution. WebSphere Cast Iron has remediated the affected versions.

CVE(s): CVE-2015-5345, CVE-2016-0706, CVE-2016-0714

Affected product(s) and affected version(s):

This vulnerability affects all versions of the product
WebSphere Cast Iron v 7.5,x,
WebSphere Cast Iron v 7.0,0,x,
WebSphere Cast Iron v 6.4.0.x
WebSphere Cast Iron v 6.3.0.x
WebSphere Cast Iron v 6.1.0.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1saMewU
X-Force Database: http://ift.tt/1rhWy5x
X-Force Database: http://ift.tt/1NSj9A0
X-Force Database: http://ift.tt/1rhWvqf

from IBM PSIRT Blog http://ift.tt/1OP8zVI