Lucene search

K
ibmIBM14BE8F518308750AC8A5B5F979F89414098C5FBE31D1D997AB24DA592042A680
HistoryJun 28, 2021 - 1:29 p.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2021-20492)

2021-06-2813:29:32
www.ibm.com
10

Summary

IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
ITNCM 6.4.2

Remediation/Fixes

Affected Product(s) Version(s) Remediation
ITNCM 6.4.2

[WebSphere Application Server Java Batch is vulnerable to an XML External Entity Injection (XXE) vulnerability ](<https://www.ibm.com/support/pages/node/6456017
> "WebSphere Application Server Java Batch is vulnerable to an XML External Entity Injection (XXE) vulnerability " )

See section: For V8.5.0.0 through 8.5.5.19:

Workarounds and Mitigations

None

Related for 14BE8F518308750AC8A5B5F979F89414098C5FBE31D1D997AB24DA592042A680