Security Bulletin: A vulnerability may affect IBM® SDK, Java™ Technology Edition used in Liberty for Java for IBM Cloud (CVE-2020-2590)

Sep 8, 2020 8:00 pm EDT | Low Severity

There are multiple security vulnerabilities that affect the IBM WebSphere Application Server in the IBM Cloud. WebSphere Application Server traditional is vulnerable to a remote code execution vulnerability. WebSphere Application Server is vulnerable to a remote code execution vulnerability. There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server. WebSphere Application Server is vulnerable to a remote code execution vulnerability. There is a server-side request forgery vulnerability in the Apache Batik library which is used by WebSphere Application Server. ...read more

from IBM Product Security Incident Response Team https://ift.tt/3hkJx5g