Security Bulletin: Vulnerabilities in java affect Power Hardware Management Console (CVE-2016-3426 )

Summary

Java is used by Power Hardware Management Console (HMC). HMC has addressed the applicable CVEs.

Vulnerability Details

CVEID: CVE-2016-3426**
DESCRIPTION:** An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the JCE component could allow a remote attacker to obtain sensitive information resulting in a partial confidentiality impact using unknown attack vectors.
CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/112457&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Affected Products and Versions

Power HMC V7.3.0.0
Power HMC V7.9.0.0
Power HMC V8.1.0.0
Power HMC V8.2.0.0
Power HMC V8.3.0.0
Power HMC V8.4.0.0
Power HMC V8.5.0.0

Remediation/Fixes

The following fixes are available on IBM Fix Central at: <http://www-933.ibm.com/support/fixcentral/&gt;

Product

|

VRMF

|

APAR

|

Remediation/Fix

—|—|—|—

Power HMC

|

V7.7.3.0 SP7

|

MB04021

|

MH01634

Power HMC

|

V7.7.9.0 SP3

|

MB04022

|

MH01635

Power HMC

|

V8.8.1.0 SP3

|

MB04023

|

MH01636

Power HMC

|

V8.8.2.0 SP2

|

MB04024

|

MH01637

Power HMC

|

V8.8.3.0 SP2

|

MB04025

|

MH01638

Power HMC

|

V8.8.4.0 SP1

|

MB04026

|

MH01639

Power HMC

|

V8.8.5.0

|

MB04027

|

MH01640