There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by QRadar SIEM. These issues were disclosed as part of the IBM Java SDK updates in October 2017.
CVE(s): CVE-2017-10295, CVE-2017-10281, CVE-2017-10350, CVE-2017-10347, CVE-2017-10349, CVE-2017-10348, CVE-2017-10357, CVE-2017-10356
Affected product(s) and affected version(s):
QRadar / QRM / QVM / QRIF / QNI 7.3.0 to 7.3.1 Patch 2
QRadar / QRM / QVM / QRIF / QNI 7.2.0 to 7.2.8 Patch 11
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015825
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133729
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133720
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133779
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133776
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133778
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133777
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133786
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133785
The post IBM SECURITY BULLETIN: Multiple vulnerabilities in IBM Java Runtime affect IBM QRadar SIEM. appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team https://ift.tt/2rcGx2G
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.