IBM Security Bulletin: Multiple vulnerabilities in IBM SDK, and Ruby on Rails affect BigFix Compliance

The BigFix Compliance product may be subject to third-party vulnerabilities in the areas of confidentiality, integrity, availability, and others. These vulnerabilities have been addressed in release 1.10.1. Further details on the specific modules, scores, and vulnerabilities are provided below.

CVE(s): http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5419, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5418, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5420, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3139, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3136, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13785, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3214, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3180, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3149, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3169, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3183

Affected product(s) and affected version(s):

Affected Product	Affected Version
IBM BigFix Compliance	1.7-1.10.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10881644
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/158110
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/158109
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/158111
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151452
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146015
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151530
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151465
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151486
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151500

The post IBM Security Bulletin: Multiple vulnerabilities in IBM SDK, and Ruby on Rails affect BigFix Compliance appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2ITvzK8