IBM Security Bulletin: IBM Event Streams is affected by jackson-databind vulnerabilities

IBM Event Streams has addressed the following vulnerabilities

CVE(s): CVE-2018-1000873, CVE-2018-19360, CVE-2018-19361, CVE-2018-19362

Affected product(s) and affected version(s):
IBM Event Streams 2018.3.0 IBM Event Streams 2018.3.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10876544
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/154804
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155091
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155092
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155093

The post IBM Security Bulletin: IBM Event Streams is affected by jackson-databind vulnerabilities appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2V4s0DS