Wednesday, February 1, 2017

IBM Security Bulletin:Information Disclosure in tWAS and Liberty in IBM eDiscovery Manager

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the improper handling of responses under certain conditions. An attacker could exploit this vulnerability to gain server identification information.

CVE(s): CVE-2016-5986

Affected product(s) and affected version(s):

IBM eDiscovery Manager Version 2.2.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2jXoZ8x
X-Force Database: http://ift.tt/2ccJKps



from IBM Product Security Incident Response Team http://ift.tt/2jXmtyT

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.