IBM Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Secure Proxy

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling Secure Proxy. These issues were disclosed as part of the IBM Java SDK updates in October 2017 and January 2018.

CVE(s): CVE-2017-10356, CVE-2018-2633, CVE-2018-2603, CVE-2018-2602, CVE-2018-2588, CVE-2018-2579

Affected product(s) and affected version(s):

IBM Sterling Secure Proxy 3.4.3.0 through 3.4.3.0 Fix Pack 2 (3.4.3.2)
IBM Sterling Secure Proxy 3.4.2.0 through 3.4.2.0 iFix 13

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22017038
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133785
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137885
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137855
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137841
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137833

The post IBM Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Secure Proxy appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2y11G6S