IBM Security Bulletin: Vulnerabilities in IBM Cloud Orchestrator (CVE-2016-0203, CVE-2015-7494)

IBM Cloud Orchestrator has identified Cross Domain Services Action and Virtual Machine Authentication vulnerabilities. IBM Cloud Orchestrator, formerly knonw as SmartCloud Orchestrator, has addressed these vulnerabilities.

CVE(s): CVE-2016-0203, CVE-2015-7494

Affected product(s) and affected version(s):

IBM Cloud Orchestrator V2.5, V2.5.01, V2.4. V2.4.0.1, V2.4.0.2, V2.4.0.3

IBM SmartCloud Orchestrator V2.3, V2.3.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2g3Qzxn
X-Force Database: http://ift.tt/2gqpt7a
X-Force Database: http://ift.tt/2g3OEZj

from IBM Product Security Incident Response Team http://ift.tt/2gqtt7B