Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM WIoTP MessageGateway (CVE-2020-2604, CVE-2020-2659)

There are multiple vulnerabilities in IBM® Runtime Environment Java Version 8.0 used by IBM WIoTP MessageGateway. These issues were disclosed as part of the IBM Java SDK updates in January 2020: CVE-2020-2604, CVE-2020-2659

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM WIoTP MessageGateway	5.0.0.1
IBM IoT MessageSight	5.0.0.0
IBM IoT MessageSight	2.0

 

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/1373787

The post Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM WIoTP MessageGateway (CVE-2020-2604, CVE-2020-2659) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/31sBc9n