IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Watson Assistant on IBM Cloud Private

There are multiple vulnerabilities in the IBM® Runtime Environment Java Technology Edition, Version 8, used by IBM Watson Assistant for IBM Cloud Private. The issues were disclosed as part of the IBM Java SDK updates for October 2018.

CVE(s): CVE-2018-3139, CVE-2018-3180

Affected product(s) and affected version(s):
This vulnerability affects IBM Watson Assistant V1.0.0 through V1.0.1.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10871820
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Watson Assistant on IBM Cloud Private appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2IuRLvq