IBM Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Tomcat vulnerabilities

IBM WebSphere Cast Iron Solution has addressed the following vulnerabilities.

CVE(s): CVE-2017-5664, CVE-2017-5647, CVE-2018-1305, CVE-2018-1304, CVE-2017-15706, CVE-2017-15698, CVE-2017-12616, CVE-2017-7674, CVE-2017-7675

Affected product(s) and affected version(s):

WebSphere Cast Iron v 7.5.1.0, 7.5.0.1, 7.5.0.0
WebSphere Cast Iron v 7.0.0.2, 7.0.0.1, 7.0.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22017032
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/126962
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/124400
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139475
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139476
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138486
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138491
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/132276
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/130248
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/130247

The post IBM Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Tomcat vulnerabilities appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2y89FPx