IBM Security Bulletin: Open Redirect Vulnerability in IBM Connections Portlets For WebSphere Portal (CVE-2016-2989)

A fix is available for an Open Redirect Vulnerability in ‘IBM Connections Portlets For WebSphere Portal’ (CVE-2016-2989).

CVE(s): CVE-2016-2989

Affected product(s) and affected version(s):

  • IBM Connections Portlets For WebSphere Portal v5.0

For unsupported versions IBM recommends upgrading to a fixed, supported version of the product.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2b1Fpen
X-Force Database: http://ift.tt/2bl3tDD



from IBM Product Security Incident Response Team http://ift.tt/2b1EURk