IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management V2018

There are multiple vulnerabilities in Node.js used by IBM® Cloud App Management V2018. IBM® Cloud App Management has addressed the applicable CVEs in a later version.

CVE(s): CVE-2018-12122, CVE-2018-12121, CVE-2018-5407, CVE-2018-0735, CVE-2018-0734, CVE-2018-12123, CVE-2018-12116

Affected product(s) and affected version(s):
IBM Cloud App Management V2018.2.0 IBM Cloud App Management V2018.4.0 IBM Cloud App Management V2018.4.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10870522
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153456
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152484
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152086
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152085
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153457
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153452

The post IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management V2018 appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2VE1Xap