Vulnerability Bulletins

IBM Security Bulletin: Multiple vulnerabilities fixed in Current Release of Liberty for Java for IBM Bluemix (CVE-2012-6153, CVE-2014-3577, CVE-2015-0178)

Affected software	IBM

Open Source Apache HttpComponents and Java overlay feature vulnerabilities CVE(s): CVE-2012-6153, CVE-2014-3577 and CVE-2015-0178 Affected product(s) and affected version(s): Applications that bind to a Cloudant database are affected by both CVE-2012-6153, CVE-2014-3577. WAR applications using the Java overlay feature are affected by CVE-2015-0178. These vulnerabilities affect all versions of Liberty for Java in IBM Bluemix up to and including v1.12-20150130-1059. Refer to the More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_fixed_in_current_release_of_liberty_for_java_for_ibm_bluemix_cve_2012_6153_cve_2014_3577_cve_2015_0178?lang=en_us

IBM Security Bulletin: Multiple vulnerabilities fixed in Current Release of Liberty for Java for IBM Bluemix (CVE-2012-6153, CVE-2014-3577, CVE-2015-0178)