Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities in NPM affects IBM API Connect (CVE-2016-3956, CVE-2016-2537, CVE-2016-2515) |
|
| Affected software | IBM |
|
IBM API Connect is affected by two ReDoS vulnerabilities in modules included in the Node.js npm tool (CVE-2016-2537, CVE-2016-2515) and Node.js Package Manager (npm) Bearer Token Vulnerability (CVE-2016-3956). These vulnerabilities are now fixed.CVE(s): CVE-2016-2515, CVE-2016-2537, CVE-2016-3956Affected product(s) and affected version(s):IBM API Connect V5.0Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-multiple-vulnerabilities-in-npm-affects-ibm-api-connect-cve-2016-3956-cve-2016-2537-cve-2016-2515/ |
|