IBM Security Bulletin: Information disclosure vulnerability in IBM Websphere Application Server and IBM Websphere Application Server Liberty affects IBM BigFix Remote Control (CVE-2016-5986)

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the improper handling of responses under certain conditions. IBM WebSphere Application Server and IBM WebSphere Application Server Liberty is used by IBM BigFix Remote Control. IBM BigFix Remote Control has remediated this vulnerability.

CVE(s): CVE-2016-5986

Affected product(s) and affected version(s):

IBM BigFix Remote Control 9.1.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2dnoxyB
X-Force Database: http://ift.tt/2ccJKps

from IBM Product Security Incident Response Team http://ift.tt/2dnpffl