IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for ACH Services, Financial Transaction Manager for Check Services, and Financial Transaction Manager for Corporate Payment Services for Multiplatforms

Apr 5, 2018 9:00 am EDT

Categorized: High Severity

Share this post:

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by Financial Transaction Manager (FTM) for ACH Services, Financial Transaction Manager for Check Services, and Financial Transaction Manager for Corporate Payment Services (CPS) for Multiplatforms. These issues were disclosed as part of the IBM Java SDK updates in January 2018.

CVE(s): CVE-2018-2579, CVE-2018-2602, CVE-2018-2599, CVE-2018-2603, CVE-2018-2633

Affected product(s) and affected version(s):

– FTM for ACH Services v3.0.2.0 – v3.0.2.1, v3.0.5.0, v3.1.0.0-3.1.0.1

– FTM for Check Services v3.0.2.0 – v3.0.2.1, v3.0.5.0

– FTM for CPS v3.0.2.0 – v3.0.2.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22014821
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137833
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137851
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137855
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137885

from IBM Product Security Incident Response Team https://ift.tt/2GYEbys