IBM Security Bulletin: A vulnerability in IBM Websphere Application Server could affect IBM Cloud App Management

There is a vulnerability in IBM Websphere Application Server used by IBM® Cloud App Management. WebSphere Application Server could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM® Cloud App Management has addressed the applicable CVE in a later version.

CVE(s): CVE-2018-1902

Affected product(s) and affected version(s):

IBM Cloud App Management V2018.2.0
IBM Cloud App Management V2018.4.0
IBM Cloud App Management V2018.4.1
IBM Cloud App Management V2019.2.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10958231
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152531

The post IBM Security Bulletin: A vulnerability in IBM Websphere Application Server could affect IBM Cloud App Management appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2XwIhXN