There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and Version 7 that are used by IBM Rational Directory Server (Tivoli) and IBM Rational Directory Administrator. These issues were disclosed as part of the IBM Java SDK updates in July 2016. New iFixes do not include the JRE. Install a new iFix and an updated JRE to resolve these issues.
CVE(s): CVE-2016-3598, CVE-2016-3511, CVE-2016-3508, CVE-2016-3500, CVE-2016-3458, CVE-2016-3485
Affected product(s) and affected version(s):
Rational Directory Server (Tivoli) v5.2.0.2 iFix 3 and earlier
Rational Directory Server (Tivoli) v5.2.1 iFix 8 and earlier
Rational Directory Administrator v6.0.0.2 iFix 3 and earlier
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2dvke1U
X-Force Database: http://ift.tt/2aGcUP3
X-Force Database: http://ift.tt/2b7Gtgl
X-Force Database: http://ift.tt/2ctomSx
X-Force Database: http://ift.tt/2ctom4Z
X-Force Database: http://ift.tt/2bTrNgj
X-Force Database: http://ift.tt/2b7G65u
from IBM Product Security Incident Response Team http://ift.tt/2cSrpDm
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.