Security Bulletin: Multiple vulnerabilities in middleware software affect IBM Cloud Pak for Automation

Jun 29, 2020 8:01 pm EDT

Categorized: High Severity

Share this post:

The vulnerabilities are related to Java, WebSphere Liberty and other docker images used by IBM Cloud Pak for Automation (ICP4A). More precisely these are in IBM® SDK Java™ Technology Edition, Version 8 disclosed as part of the IBM Java SDK updates in October 2019 and January 2020, and in WebSphere Application Server Liberty 20.0.3 which has been applied the required patches to fix the related vulnerabilities.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Cloud Pak for Automation	19.0.3
IBM Cloud Pak for Automation	20.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6235074

from IBM Product Security Incident Response Team https://ift.tt/3idw4h3