Security Bulletin: A Security Vulnerability Has Been Identified In IBM Cloud Private shipped with IBM Event Streams CVE-ID: CVE-2018-1002105

Summary

IBM Cloud Private is shipped with IBM Event Streams. Information about a security vulnerability affecting IBM Cloud Private has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin listed in the Remediation/Fixes section

Affected Products and Versions

IBM Event Streams 2018.3.0

IBM Event Streams 2018.3.1

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by IBM Cloud Private which is shipped with IBM Event Streams.

Principal Product and Version(s)

|

Affected Supporting Product and Version

|

Affected Supporting Product Security Bulletin

—|—|—
IBM Event Streams 2018.3.0 | IBM Cloud Private 3.1.0 |

Security Bulletin: IBM Cloud Private is affected by a privilege escalation vulnerability in Kubernetes API server

<https://www-01.ibm.com/support/docview.wss?uid=ibm10744263&gt;

IBM Event Streams 2018.3.1

|

IBM Cloud Private 3.1.1

|

Security Bulletin: IBM Cloud Private is affected by a privilege escalation vulnerability in Kubernetes API server

<https://www-01.ibm.com/support/docview.wss?uid=ibm10744263&gt;