IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Algo Credit Manager

There are multiple vulnerabilities in IBM® SDK, Java™ Technology Edition, Version 7R1 Service Refresh 4 Fix Pack 10 and earlier releases and IBM SDK, Java Technology Edition, Version 8 Service Refresh 4 Fix Pack 10 and earlier releases used by IBM Algo Credit Manager. These issues were disclosed as part of the IBM Java SDK updates in October 2017.

CVE(s): CVE-2017-10356, CVE-2017-10357, CVE-2017-10348, CVE-2017-10349, CVE-2017-10347, CVE-2017-10350, CVE-2017-10281

Affected product(s) and affected version(s):

IBM Algo Credit Manager 5.2 – 5.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zbwnVb
X-Force Database: http://ift.tt/2jyFZR1
X-Force Database: http://ift.tt/2i6pg73
X-Force Database: http://ift.tt/2jy9C4Q
X-Force Database: http://ift.tt/2i3qIHk
X-Force Database: http://ift.tt/2jyG47h
X-Force Database: http://ift.tt/2i6pgE5
X-Force Database: http://ift.tt/2jy9EK0

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Algo Credit Manager appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2j1mQai