Authors: Created by IBM

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available.You can track this item individually or track all items by product. Notify me when this APAR changes. Notify me when an APAR for...

Just published by IBM: Read more

Authors: Created by IBM

File link	File size	File description

...

Just published by IBM: Read more

Authors: Created by IBM

IBM WebSphere Application Server traditional is vulnerable to a remote code execution vulnerability.This has been addressed. CVEID:  CVE-2023-23477^[1]
DESCRIPTION:  IBM WebSphere Application Server traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.
CVSS Base score:8.1
CVSS Temporal Score:See:https://exchange.xforce.ibmcloud.com/vulnerabilities/245513^[2]...

Just published by IBM: Read more

Authors: Created by IBM

There is a vulnerability in the Apache James MIME4J library used by IBM WebSphere Application Server Liberty when the feature restfulWS-3.0 is enabled.This has been addressed. CVEID:  CVE-2022-45787^[1]
DESCRIPTION:  Apache James MIME4J could allow a local authenticated attacker to obtain sensitive information, caused by improper laxist permissions on the temporary files.By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive...

Just published by IBM: Read more

Authors: Created by IBM

There is a vulnerability in the Apache CXF library used by IBM WebSphere Application Server Liberty with the jaxws-2.2 feature enabled.This has been addressed. CVEID:  CVE-2022-46364^[1]
DESCRIPTION:  Apache CXF is vulnerable to server-side request forgery, caused by a flaw in parsing the href attribute of XOP:Include in MTOM requests.By using a specially-crafted request, an attacker could exploit this vulnerability to conduct SSRF attack.
...

Just published by IBM: Read more