IBM0448CEDF095162EB7B28FD451EFEF8F9A33199713829F93F3AA2EF3056AFA6D4Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM WebSphere Application Server Liberty is vulnerable to an Information Disclosure (CVE-2022-22393)
Summary
IBM WebSphere Application Server Liberty is vulnerable to an information disclosure with the adminCenter-1.0 feature enabled. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin. Global Configuration Management (GCM), Rational DOORS Next Generation (RDNG), Collaborative Lifecycle Management (CLM), Rational Team Concert (RTC), IBM Engineering Requirements Management DOORS Next(DNG), Engineering Lifecycle Management (ELM), IBM Engineering Workflow Management (EWM)
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Version(s) | Affected Product(s) |
|---|---|
| All | Global Configuration Management (GCM) |
| 6.0.6 | Rational DOORS Next Generation (RDNG) |
| Collaborative Lifecycle Management (CLM) | |
| Rational Team Concert (RTC) | |
| 6.0.6.1 | Rational DOORS Next Generation (RDNG) |
| Collaborative Lifecycle Management (CLM) | |
| Rational Team Concert (RTC) | |
| 7, 7.0.1, 7.0.2 | IBM Engineering Requirements Management DOORS Next(DNG) |
| Engineering Lifecycle Management (ELM) | |
| IBM Engineering Workflow Management (EWM) |
Remediation/Fixes
This vulnerability affects IBM® Engineering Lifecycle Engineering products mentioned above, which uses IBM WebSphere Application Server Liberty versions 17.0.0.3 - 22.0.0.5.
If the Product is deployed on one of the above versions, Please follow the instruction given in the following article
Link - <https://www.ibm.com/support/pages/node/6585704>
Workarounds and Mitigations
None
Related
