Multiple vulnerabilities were identified in IBM WebSphere Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, security restriction bypass, information disclosure, spoofing and data manipulation on the targeted system.
Security Restriction Bypass
System / Technologies affected
IBM WebSphere Application Server version 8.5, 9.0
IBM WebSphere Application Server - Liberty version 17.0.0.3 - 26.0.0.10
IBM WebSphere Application Server - Liberty version 20.0.0.12 - 26.0.0.10
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
