IBM Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator (CVE-2016-5986)
There is a potential information disclosure vulnerability in WebSphere Application Server, Tivoli System Application Automation Manager, and Business Process Manager that are shipped with IBM Cloud Orchestrator standard and Enterprise editions. In addition, a potential information disclosure vulnerability has been identified in Jazz for Service Management that is shipped with IBM Cloud Orchestrator Enterprise edition. Information about a security vulnerability affecting IBM WebSphere Application Server, Tivoli System Application Automation Manager, Business Process Manager, and Jazz for Service Management have been published in security bulletins.
CVE(s): CVE-2016-5986
Affected product(s) and affected version(s):
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2sokg4V
X-Force Database: http://ift.tt/2ccJKps
The post IBM Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator (CVE-2016-5986) appeared first on IBM PSIRT Blog.
| Principal Product and Version(s) | Affected Supporting Product and Version |
| IBM Cloud Orchestrator V2.5, V2.5.0.1, V2.5.0.2 |
|
| IBM Cloud Orchestrator V2.4, V2.4.0.1, V2.4.0.2, V2.4.0.3, V2.4.0.4 |
|
| IBM Cloud Orchestrator V2.3, V2.3 0.1 |
|
| IBM Cloud Orchestrator Enterprise V2.5, V2.5.0.1, V2.5.0.2, |
|
| IBM Cloud Orchestrator Enterprise V2.4, V2.4.0.1, V2.4.0.2, V2.4.0.3, V2.4.0.4 |
|
| IBM Cloud Orchestrator Enterprise V2.3, V2.3.0.1 |
|
from IBM Product Security Incident Response Team http://ift.tt/2sopvSr