IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SONAS

There is a vulnerability in IBM® Runtime Environment Java Technology Edition, that is used by IBM SONAS. IBM SONAS has addressed the applicable CVEs.

CVE(s): CVE-2018-3139, CVE-2018-3136, CVE-2018-13785, CVE-2018-3180, CVE-2018-3149, CVE-2018-3169, CVE-2018-3183

Affected product(s) and affected version(s):

IBM SONAS
The product is affected when running a code releases 1.5.0.0 to 1.5.2.10

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10871308
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151452
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146015
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151465
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151486
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151500

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SONAS appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2J6Dkwl