Security Bulletin: Security vulnerabilities have been identified in IBM Java shipped with IBM Tivoli Security Policy Manager (CVE-2018-2973, CVE-2018-1656)

Summary

IBM Tivoli Security Policy Manager (TSPM) is affected through IBM WebSphere Application Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a bulletin.

Vulnerability Details

Please consult the security bulletin Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affects WebSphere Application Server July 2018 CPU for vulnerability details and information about fixes.

Affected Products and Versions

Product Version

| WebSphere version
—|—
TSPM 7.1 | WAS V7.0
RTSS 7.1 | WAS V7.0, V8.0

Note: TSPM is comprised of TSPM and Runtime Security Services (RTSS).