Security Bulletin: Information disclosure vulnerability in WebSphere Application Server which is shipped with Jazz for Service Management (CVE-2019-4477)

There is an information disclosure in WebSphere Application Server when using Security Auditing.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
Jazz for Service Management	1.1.3 – 1.1.3.5

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/3608811

The post Security Bulletin: Information disclosure vulnerability in WebSphere Application Server which is shipped with Jazz for Service Management (CVE-2019-4477) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2I3GxuQ