Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise (CVE-2017-1380)

Summary

There is a potential security vulnerability in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Consult the security bulletin Security Bulletin: Cross-site scripting vulnerability in Admin Console for WebSphere Application Server (CVE-2017-1380) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

|

Affected Supporting Product and Version
—|—

IBM Cloud Orchestrator V2.5, V2.5.0.1, V2.5.02. V2.5.0.3 and V2.5.0.4 |

• WebSphere Application Server V8.5.5 through V8.5.5.11

IBM Cloud Orchestrator V2.4, V2.4.0.1, V2.4.0.2, V2.4.0.3 and V2.4.0.4 |

• WebSphere Application Server V8.5.5 through V8.5.5.12

IBM Cloud Orchestrator Enterprise V2.5, V2.5.0.1, V2.5.02. V2.5.0.3 and V2.5.0.4 |

• WebSphere Application Server V8.5.5 through V8.5.5.11

IBM Cloud Orchestrator Enterprise V2.4, V2.4.0.1, V2.4.0.2, V2.4.0.3 and V2.4.0.4 |

• WebSphere Application Server V8.5.5 through V8.5.5.12

Workarounds and Mitigations

None