IBM Security Bulletin: Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2018-1304, CVE-2018-1305)

Previous releases of IBM UrbanCode Deploy are affected by multiple vulnerabilities in Apache Tomcat.

CVE(s): , CVE-2018-1304

Affected product(s) and affected version(s):

All fixpacks of IBM UrbanCode Deploy 6.1 – 6.1.3.7 and 6.2 – 6.2.7.2 are affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=swg2C1000378
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139475
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139476

The post IBM Security Bulletin: Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2018-1304, CVE-2018-1305) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2vSxoQ3