IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK 7 affect IBM Systems Director.

There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 7 that is used by IBM Systems Director. These issues were disclosed as part of the IBM Java SDK updates in July 2017.

CVE(s): CVE-2017-10115, CVE-2017-10116

Affected product(s) and affected version(s):

From the IBM System Director command line enter smcli lsver to determine the level of IBM System Director installed.

IBM Systems Director:

• 6.1.0.0
• 6.1.0.1
• 6.1.0.2
• 6.1.0.3
• 6.1.1.1
• 6.1.1.2
• 6.1.1.3
• 6.1.2.0
• 6.1.2.1
• 6.1.2.2
• 6.1.2.3
• 6.2.0.0
• 6.2.0.1
• 6.2.0.2
• 6.2.1.0
• 6.2.1.0
• 6.2.1.1
• 6.2.1.2
• 6.3.0.0
• 6.3.1.0
• 6.3.1.1
• 6.3.2.0
• 6.3.2.1
• 6.3.2.2
• 6.3.3.0
• 6.3.3.1
• 6.3.5.0
• 6.3.6.0
• 6.3.7.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zUkS2G
X-Force Database: http://ift.tt/2xsr7ZC
X-Force Database: http://ift.tt/2wyaY8O

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK 7 affect IBM Systems Director. appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2xu7z7A