IBM Security Bulletin: IBM Event Streams is affected by Node.js vulnerabilities

IBM Event Streams is affected by the following vulnerabilities in the included Node.js runtime shipped.

CVE(s): CVE-2018-12122, CVE-2018-12121, CVE-2018-12123, CVE-2018-12116

Affected product(s) and affected version(s):
IBM Event Streams 2018.3.0 IBM Event Streams 2018.3.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10795830
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153456
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153457
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153452

The post IBM Security Bulletin: IBM Event Streams is affected by Node.js vulnerabilities appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2V58bMK