Security Bulletin: A vulnerability in IBM Java Runtime affect Financial Transaction Manager for Check Services for Multi-Platform

Summary

There is a vulnerability in IBM® Runtime Environment Java™ Version 7 or Version 8 used by Financial Transaction Manager for Check Services for Multi-Platform (FMT CHK). Financial Transaction Manager for Check Services for Multi-Platform has addressed the applicable CVE.

Vulnerability Details

CVEID: CVE-2019-2684 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded RMI component could allow an unauthenticated attacker to cause no confidentiality impact, high integrity impact, and no availability impact.
CVSS Base Score: 5.9
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/159776&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

Affected Products and Versions

FTM CHK: v3.0.0.0 - 3.0.0.15, v3.0.2.0 - 3.0.2.1, v3.0.5.0 - 3.0.5.3

Remediation/Fixes

VRMF

|

APAR

|

Remediation / First Fix

—|—|—
3.0.0 | PH11963 | 3.0.0.15-FTM-Check-MP-iFix0016
3.0.2 | PH11963 | 3.0.2.1-FTM-Check-MP-iFix0018
3.0.5 | PH11963 | 3.0.5-FTM-Check-MP-fp0004

Workarounds and Mitigations

None