Security Bulletin: Information disclosure in Apache Commons HttpClient may affect WebSphere Application Server as part of IBM InfoSphere Identity Insight (CVE-2012-5783)

Summary

There is a potential information disclosure in Apache Commons HttpClient used by WebSphere Application Server shipped as part of IBM InfoSphere Identity Insight.

Vulnerability Details

CVE(s):CVE-2012-5783

Link to security bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22016216

Affected Products and Versions

IBM InfoSphere Identity Insight 8.1

Remediation/Fixes

To fix Identity Insight 8.1, upgrade its embedded WebSphere to fix pack level 7.0.0.45 and then apply Interim Fix PI96685 and PI98251.

**DISCLAIMER:**This version of the product uses Java 6, which is now beyond end of support. Customers using IBM InfoSphere Identity Insight 8.1 are encouraged to move to IBM InfoSphere Identity Insight 9.0.