There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU – Oct 2018 – Includes Oracle Oct 2018 CPU used by IBM Streams. IBM Streams has addressed the applicable CVEs.
CVE(s): CVE-2018-3139, CVE-2018-3136, CVE-2018-13785, CVE-2018-3214, CVE-2018-3180, CVE-2018-3149, CVE-2018-3169, CVE-2018-3183
Affected product(s) and affected version(s):
| Affected InfoSphere Streams | Affected Versions |
|---|---|
| InfoSphere Streams | 4.0.1.6 and earlier |
| InfoSphere Streams | 3.2.1.6 and earlier |
| IBM Streams | 4.1.1.7 and earlier |
| IBM Streams | 4.2.1.5 and earlier |
| IBM Streams | 4.3.0.0 |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10794137
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151452
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146015
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151530
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151465
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151486
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151500
The post IBM Security Bulletin: Vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU – Oct 2018 – Includes Oracle Oct 2018 CPU appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team https://ift.tt/2Oi8t05
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.