IBM Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in IBM WebSphere Application Server (CVE-2016-5986)

An information disclosure vulnerability has been identified in IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. IBM Security Access Manager appliances are affected by this vulnerability.

CVE(s): CVE-2016-5986

Affected product(s) and affected version(s):

IBM Security Access Manager for Web 8.0 appliances, all firmware versions.

IBM Security Access Manager for Mobile 8.0 appliances, all firmware versions.

IBM Security Access Manager 9.0 appliances, all firmware versions.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2mMLTlE
X-Force Database: http://ift.tt/2ccJKps

The post IBM Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in IBM WebSphere Application Server (CVE-2016-5986) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2mMR7h5