IBM Security Bulletin: IBM Tivoli Access Manager for e-business and IBM Security Access Manager releases are affected by a Kerberos vulnerability (CVE-2017-11462)

IBM Tivoli Access Manager for e-business and IBM Security Access Manager have addressed the following vulnerability.

CVE(s): CVE-2017-11462

Affected product(s) and affected version(s):

Software releases

Appliance releases

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015092
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/132060

The post IBM Security Bulletin: IBM Tivoli Access Manager for e-business and IBM Security Access Manager releases are affected by a Kerberos vulnerability (CVE-2017-11462) appeared first on IBM PSIRT Blog.

Affected IBM Security Access Manager Appliance	Affected Versions
IBM Security Access Manager for Web	7.0-7.0.0.32
IBM Security Access Manager for Web	8.0-8.0.1.7
IBM Security Access Manager for Mobile	8.0-8.0.1.7
IBM Security Access Manager	9.0.3.0 – 9.0.4.0

Affected product	Affected Versions
IBM Tivoli Access Manager for e-business	6.1 – 6.1.0.35
IBM Tivoli Access Manager for e-business	6.1.1 – 6.1.1.34
IBM Security Access Manager (software)	7.0-7.0.0.32

from IBM Product Security Incident Response Team https://ift.tt/2w1JJBG