Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational ClearCase

Summary

IBM WebSphere Application Server is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

Review Security Bulletin: Classloader Manipulation Vulnerability in IBM WebSphere Application Server CVE-2014-0114 for vulnerability details.

Affected Products and Versions

IBM Rational ClearCase, CM Server/CCRC WAN server component

Version

|

Status

—|—
8.0.1.x| Not affected
8.0.0.x| Affected only if you are using WebSphere Application Server version 7
7.1.0.x, 7.1.1.x, 7.1.2.x| Affected
7.0.x| Not affected
This vulnerability only applies to the WAN server component, not to other parts of IBM Rational ClearCase.

Remediation/Fixes

Update your CM Server/CCRC WAN server system to a newer version of WebSphere Application Server. Apply the fixes listed in the security bulletin.

Affected Versions

|

** Applying the fix**

—|—
7.1.0.x, 7.1.1.x, and 7.1.2.x| Document 1390803 explains how to update WebSphere Application Server for ClearCase CM Servers at release 7.1.x. Consult those instructions when applying the fix.
8.0.0.x, running with WebSphere Application Server 7| Apply the WebSphere Application Server fix directly to your CCRC WAN server host. No ClearCase-specific steps are necessary.

Workarounds and Mitigations

None