IBM Security Bulletin:Information Disclosure in tWAS and Liberty in IBM eDiscovery Manager
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the improper handling of responses under certain conditions. An attacker could exploit this vulnerability to gain server identification information.
CVE(s): CVE-2016-5986
Affected product(s) and affected version(s):
IBM eDiscovery Manager Version 2.2.2
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2jXoZ8x
X-Force Database: http://ift.tt/2ccJKps
from IBM Product Security Incident Response Team http://ift.tt/2jXmtyT