IBM Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Insight

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Cognos Insight. These issues were disclosed as part of the IBM Java SDK updates in January 2018 and April 2018. Multiple Open Source OpenSSL vulnerabilities have also been addressed.

CVE(s): CVE-2017-3735, CVE-2017-3736, CVE-2018-0739, CVE-2018-0733, CVE-2018-2663, CVE-2018-2602, CVE-2018-2603, CVE-2018-2634, CVE-2018-2637, CVE-2018-2795, CVE-2018-2796, CVE-2018-2797, CVE-2018-2783, CVE-2018-2790

Affected product(s) and affected version(s):

• IBM Cognos Insight 10.2.1
• IBM Cognos Insight 10.2.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10716289
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131047
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140847
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140849
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137917
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137855
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137886
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137889
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141951
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141952
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141953
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141939
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141946

The post IBM Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Insight appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2uvQWsH