Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java™ Technology Edition affect SmartCloud Provisioning (CVE-2014-4263, CVE-2014-4244)

Summary

Multiple security vulnerabilities exist in the IBM SDK, Java™ Technology Edition that is shipped with IBM SmartCloud Provisioning (CVE-2014-4263, CVE-2014-4244).

Vulnerability Details

CVEID: CVE-2014-4263**
DESCRIPTION:** An unspecified vulnerability in Oracle Java SE and JRockit related to the Security component has partial confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/94606&gt;_ for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)

CVEID: CVE-2014-4244**
DESCRIPTION:** An unspecified vulnerability in Oracle Java SE and JRockit related to the Security component has partial confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/94605&gt;_ for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)

Affected Products and Versions

SmartCloud Provisioning 2.3, 2.3 Fix Pack 1 up to iFix 4

Remediation/Fixes

The recommended solution is to apply the fix as soon as practical. Please see below for information on the fixes available.
Fix:
Upgrade to IBM SmartCloud Provisioning 2.3 Fix Pack 1, iFix 6

Workarounds and Mitigations

None