IBM Security Bulletin: IBM API Connect is impacted by multiple open source software vulnerabilities.

IBM API Connect has addressed the following vulnerabilities.

CVE(s): CVE-2017-0268, CVE-2018-0210, CVE-2018-0021, CVE-2016-10531, CVE-2018-11698, CVE-2018-11499, CVE-2018-11693, CVE-2018-11697, CVE-2018-11696, CVE-2018-11694, CVE-2018-11695

Affected product(s) and affected version(s):

IBM API Connect version 5.0.8.0-5.0.8.4;2018.1-2018.4.1.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10794165
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/125554
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139992
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141516
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149101
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144297
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143880
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144323
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144302
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144308
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144317
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144311

The post IBM Security Bulletin: IBM API Connect is impacted by multiple open source software vulnerabilities. appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2WDj6O5