Security Bulletin
Summary
There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8, which is used by IBM Watson Explorer.
Vulnerability Details
CVEID: CVE-2016-3426
DESCRIPTION: An unspecified vulnerability related to the Java Cryptography Extension (JCE) component could allow a remote attacker to obtain sensitive information resulting in a partial confidentiality impact using unknown attack vectors.
CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112457 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Affected Products and Versions
This vulnerability applies to apply to the following products and versions:
- Watson Explorer Foundational Components version 11.0.0 through 11.0.0.3
- Watson Explorer Foundational Components Annotation Administration Console version 11.0.0 through 11.0.0.3
- Watson Explorer Analytical Components version 11.0.0 through 11.0.0.3
Remediation/Fixes
Follow these steps to upgrade to the required version of IBM Java Runtime.
The table reflects product names at the time the specified versions were released. To use the links to Fix Central in this table, you must first log in to the IBM Support: Fix Central site at http://www.ibm.com/support/fixcentral/.
| Affected Product | Affected Versions | Required IBM Java Runtime | How to acquire and apply the fix |
|---|---|---|---|
| IBM Watson Explorer Foundational Components | 11.0.0 through 11.0.0.3 | 8.0 SR3 (8.0.3.0) or later | Upgrade Watson Explorer Foundational Components to Version 11.0.1. For information about this version, and links to the software and release notes, see the download document. For information about upgrading, see the upgrade procedures. |
| IBM Watson Explorer Foundational Components, Annotation Administration Console | 11.0.0 through 11.0.0.3 | 8.0 SR3 (8.0.3.0) or later | Upgrade Annotation Administration Console to Version 11.0.1. For information about this version, and links to the software and release notes, see the download document. For information about upgrading, see the upgrade procedures. |
| IBM Watson Explorer Analytical Components | 11.0.0 through 11.0.0.3 | 8.0 SR3 (8.0.3.0) or later | Upgrade Watson Explorer Analytical Components to Version 11.0.1. For information about this version, and links to the software and release notes, see the download document. For information about upgrading, see the upgrade procedures. |
Workarounds and Mitigations
None
Get Notified about Future Security Bulletins
References
Change History
23 June 2016: Original version published
*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.
Disclaimer
Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.
Was this topic helpful?
Document Information
Modified date:
17 June 2018
UID
swg21984803