IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect the IBM Spectrum Protect Server (CVE-2017-10295, CVE-2017-10355)

Apr 4, 2018 1:31 pm EDT

Categorized: Medium Severity

Share this post:

There are multiple vulnerabilities in IBM® Runtime Environment Java™ used by the IBM Spectrum Protect Server. These issues were disclosed as part of the IBM Java SDK updates in October 2017.

CVE(s): CVE-2017-10295, CVE-2017-10355

Affected product(s) and affected version(s):

This vulnerability affects the IBM Spectrum Protect Server levels 8.1.3.0 through 8.1.4.x.

Note that releases 8.1.3.0 and below of the IBM Spectrum Protect (formerly Tivoli Storage Manager) Server are not affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22013493
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133729
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133784

from IBM Product Security Incident Response Team https://ift.tt/2JkbY3A