IBM Security Bulletin: Publicly Disclosed Vulnerability Found By vFinder (CVE-2017-7656, CVE-2017-7657, CVE-2017-7658, CVE-2018-12536)

Previous releases of IBM UrbanCode Deploy are affected by multiple vulnerabilities in Eclipse Jetty

CVE(s): CVE-2017-7658, CVE-2017-7656, CVE-2017-7657

Affected product(s) and affected version(s):

All fixpacks of IBM UrbanCode Deploy 6.1 – 6.1.3.9, IBM UrbanCode Deploy 6.2 – 6.2.7.3, and IBM UrbanCode Deploy 7.0-7.0.1.1 are affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10794721
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145522
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145520
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145521

The post IBM Security Bulletin: Publicly Disclosed Vulnerability Found By vFinder (CVE-2017-7656, CVE-2017-7657, CVE-2017-7658, CVE-2018-12536) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2HvJK83