IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Security Identity Manager Virtual Appliance

There are multiple vulnerabilities in IBM® SDK Java Technology Edition, Version 7 and IBM® Runtime Environment Java Version 7 used by IBM Security Identity Manager Virtual Appliance. IBM Security Identity Manager Virtual Appliance has addressed the applicable CVEs.

CVE(s): CVE-2017-10067, CVE-2017-10115, CVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10116, CVE-2017-10102, CVE-2017-10087, CVE-2017-10089, CVE-2017-10107, CVE-2017-10110, CVE-2017-10111, CVE-2017-1376, CVE-2017-10053, CVE-2017-10135, CVE-2017-10345, CVE-2017-10293, CVE-2017-10274, CVE-2018-2579, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2633, CVE-2018-2783, CVE-2018-3139, CVE-2018-3180, CVE-2018-12547, CVE-2019-2426

Affected product(s) and affected version(s):

Product	Version
IBM Security Identity Manager VA	7.0.1 – 7.0.1.11

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10878390
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128831
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128876
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128852
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128858
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128862
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128877
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128863
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128849
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128851
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128868
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128871
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128872
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/126873
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128822
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128894
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133774
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133727
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133714
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137833
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137855
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137870
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137885
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141939
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/157512
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155744

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Security Identity Manager Virtual Appliance appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2HJUBeE