IBM Security Bulletin: IBM API Connect Developer Portal is impacted by multiple PHP vulnerabilities(CVE-2019-11038 CVE-2019-11039 CVE-2019-11040)

IBM API Connect has addressed the following vulnerability.

CVE(s): CVE-2019-11038, CVE-2019-11039, CVE-2019-11040

Affected product(s) and affected version(s):

IBM API Connect versions

5.0.0.0-5.0.8.6 iFix 1

2018.1-2018.4.1.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10888165
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/161866
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/161867
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/161868

The post IBM Security Bulletin: IBM API Connect Developer Portal is impacted by multiple PHP vulnerabilities(CVE-2019-11038 CVE-2019-11039 CVE-2019-11040) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2IVyO3g