IBM Security Bulletin: A vulnerability in IBM Java SDK affects IBM Spectrum Scale packaged in IBM Elastic Storage Server (CVE-2018-3180)

There is a vulnerability in IBM® SDK Java Technology Edition, Version 8 used by IBM Elastic Storage Server. This issue was disclosed as part of the IBM Java SDK updates in Oct 2018.

CVE(s): CVE-2018-3180

Affected product(s) and affected version(s):

The Elastic Storage Server 5.3 thru 5.3.2.0
The Elastic Storage Server 5.0.0 thru 5.2.4
The Elastic Storage Server 4.5.0 thru 4.6.0
The Elastic Storage Server 4.0.0 thru 4.0.6

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10788087
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497

The post IBM Security Bulletin: A vulnerability in IBM Java SDK affects IBM Spectrum Scale packaged in IBM Elastic Storage Server (CVE-2018-3180) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2v635Vb