Security Bulletin: Vulnerability in IBM TRIRIGA Application Platform (CVE-2015-7450)

Summary

IBM TRIRIGA Platform is vulnerable to Java Object De-Serialization Vulnerability.

Vulnerability Details

CVEID:CVE-2015-7450

CVSS Base Score: 9.80
CVSS Temporal Score: See X-Force for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

The following IBM TRIRIGA Application Platform versions are affected.
· IBM TRIRIGA Application Platform 3.4.
· IBM TRIRIGA Application Platform 3.3.

Remediation/Fixes

This vulnerability is resolved in the IBM TRIRIGA Application Platform 3.4.2.2, and 3.3.2.5 fix packs.

Workarounds and Mitigations

Until you apply the fixes, it may be possible to reduce the risk of a successful attack by restricting access to internal networks, and not allowing external/Internet access to the application.