Security Bulletin: Security vulnerabilities have been identified in IBM Java shipped with IBM Tivoli Security Policy Manager(CVE-2019-2426, CVE-2018-12547, CVE-2018-1890)

Summary

IBM Tivoli Security Policy Manager (TSPM) is affected through IBM WebSphere Application Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a bulletin.

Vulnerability Details

Please consult the security bulletin Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server January 2019 CPU for vulnerability details and information about fixes.

Affected Products and Versions

Product Version

| WebSphere version
—|—
TSPM 7.1 | WAS V7.0
RTSS 7.1 | WAS V7.0, V8.0

Note: TSPM is comprised of TSPM and Runtime Security Services (RTSS).