Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs.

Vulnerability Details

**IBM X-Force ID:**PSIRT-ADV0103951
**DESCRIPTION:**Created from Advisory: ADV0103951
CVSS Base score: 8.1
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products and Versions

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now by upgrading.

IBM Installation Manager and IBM Packaging Utility| 1.9.x| IJ49776 IJ49187| 1.9.2.8 IBM Installation Manager Remediation
1.9.2.8 IBM Packaging Utility Remediation
—|—|—|—

Workarounds and Mitigations

None