Security Bulletin: August 2020 : CVE-2020-2654 in IBM Java Runtime affect CICS Transaction Gateway

Aug 25, 2020 8:00 pm EDT

Categorized: Low Severity

Share this post:

CVE-2020-2654 vulnerability is applicable for IBM® Runtime Environment Java™ Versions 7.0, 7.1 and 8.0 used by CICS Transaction Gateway. CICS Transaction Gateway has addressed the applicable CVE-2020-2654.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM CICS Transaction Gateway	9.1.0.0 – 9.1.0.3
IBM CICS Transaction Gateway	9.2.0.0 – 9.2.0.2
IBM CICS Transaction Gateway	9.0.0.0 – 9.0.0.4
IBM CICS Transaction Gateway	8.1.0.0 – 8.1.0.5
IBM CICS Transaction Gateway	8.0.0.0 – 8.0.0.6

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6322435

from IBM Product Security Incident Response Team https://ift.tt/2EuqTKp