IBM Security Bulletin: Multiple vulnerabilities affect the GSKit component of IBM Tivoli Monitoring

The following security issues have been identified in the GSKit component included as part of the IBM Tivoil Monitoring product.

CVE(s): CVE-2018-1388, CVE-2016-0705, CVE-2017-3732, CVE-2017-3736, CVE-2018-1428, CVE-2018-1427, CVE-2018-1426, CVE-2016-0702, CVE-2018-1447

Affected product(s) and affected version(s):

IBM Tivoli Monitoring versions 6.3.0 through 6.3.0 FP7 all CVE’s above except for CVE-2018-1388

IBM Tivoli Monitoring versions 6.2.3 through 6.2.3 FP5 all CVE’s above except for CVE-2016-0702

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015424
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138212
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111140
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/121313
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139073
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139072
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139071
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111144
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139972

The post IBM Security Bulletin: Multiple vulnerabilities affect the GSKit component of IBM Tivoli Monitoring appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2JZisFh