Security Bulletin: Rational Integration Tester HTTP/TCP Proxy component in Rational Test Virtualization Server and Rational Test Workbench affected by Netty vulnerabilities (CVE-2020-7238, CVE-2019-16869, CVE-2019-20445, CVE-2019-20444)

Netty is vulnerable to security issues affecting the Rational Integration Tester HTTP/TCP Proxy component in Rational Test Virtualization Server and Rational Test Workbench

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
HTTP/TCP Proxy component in Rational Test Virtualization Server	8.7.1.2, 9.0.1.1, 9.1.1.1, 9.2.1.1, 9.5.0, 10.0.2.0
HTTP/TCP Proxy component in Rational Test Workbench	8.7.1.2, 9.0.1.1, 9.1.1.1, 9.2.1.1, 9.5.0, 10.0.2.0

All versions prior to those shown are affected. Upgrade to the latest versions shown.

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/5692628

The post Security Bulletin: Rational Integration Tester HTTP/TCP Proxy component in Rational Test Virtualization Server and Rational Test Workbench affected by Netty vulnerabilities (CVE-2020-7238, CVE-2019-16869, CVE-2019-20445, CVE-2019-20444) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2wAEHze