IBM Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affects Optim Data Growth, Test Data Management and Application Retirement

There are multiple vulnerabilities in IBM® Runtime Environment Java Version 6 and IBM® Runtime Environment Java Version 8 used by Optim Data Growth, Test Data Management, and Application Retirement. These issues were disclosed as part of the IBM Java SDK updates in January, April and July 2018.

CVE(s): CVE-2018-2800, CVE-2018-2783, CVE-2018-2588, CVE-2018-2678, CVE-2018-2602, CVE-2018-2633, CVE-2018-2638, CVE-2018-2639, CVE-2017-3736, CVE-2017-3732, CVE-2016-0705, CVE-2018-1517, CVE-2018-2973

Affected product(s) and affected version(s):

IBM InfoSphere Optim solutions and editions version 11.3 running on all supported platforms are affected.

Both editions (Enterprise and Workgroup) of the following products are affected:

• Optim Archive
• Optim Data Privacy
• Optim Test Data Management

All variations of the following solutions are affected:

• Optim Data Growth Solution
• Optim Solution for Application Retirement
• Optim Test Data Management Solution

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10734877
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141956
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141939
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137841
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137933
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137885
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137890
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137891
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/121313
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111140
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835

The post IBM Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affects Optim Data Growth, Test Data Management and Application Retirement appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2UoDBNN