Security Bulletin: A security vulnerability has been identified in NodeJS shipped with IBM Cloud Schematics (CVE-2017-14919)

Summary

A security vulnerability has been identified in NodeJS shipped with IBM Cloud Schematics (CVE-2017-14919)

Vulnerability Details

Title****
Security Bulletin: A security vulnerability has been identified in NodeJS shipped with IBM Cloud Schematics (CVE-2017-14919)

Summary

NodeJS is shipped as a component of IBM Cloud Schematics. Information about a security vulnerability affecting NodeJS** **has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin <https://nvd.nist.gov/vuln/detail/CVE-2017-14919&gt; for vulnerability details and information about fixes.

Affected Products and Versions

SaaS

| NodeJS

4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0

Reemediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by NodeJS which is/are shipped with IBM Cloud Schematics.
<https://nvd.nist.gov/vuln/detail/CVE-2017-14919&gt;

IBM Cloud Schematics was upgraded to NodeJS 6.11.5 on November, 23th 2017

Mitigation/Workarounds

- no migration required
- no workarounds available

Related Information (DCF will auto include the first 2 links below)

_IBM Secure Engineering Web Portal __
_IBM Product Security Incident Response Blog