IBM Security Bulletin: Vulnerability in Apache Tomcat affects IBM Platform Symphony

This interim fix provides instructions on upgrading Apache Tomcat from v5.5.36 to v7.0.90 in IBM Platform Symphony 6.1.1 and from v6.0.43 to v8.5.32 in IBM Platform Symphony 7.1 Fix Pack 1 in order to address security vulnerability CVE-2018-8014 in Tomcat.

CVE(s): CVE-2018-8014

Affected product(s) and affected version(s):

Platform Symphony 6.1.1
Platform Symphony 7.1 Fix Pack 1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10718917
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143411

The post IBM Security Bulletin: Vulnerability in Apache Tomcat affects IBM Platform Symphony appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2LtDYkY