Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security/Tivoli Directory Server (CVE-2017-1382)

Summary

IBM Websphere Application Server is shipped as a component of IBM Security/Tivoli Directory Server. Information about a security vulnerability affecting IBM Websphere Application Server has been published in a security bulletin.

Vulnerability Details

Please see the following security bulletin for vulnerability details:
Security Bulletin: WebSphere Application Server may have insecure file permissions (CVE-2017-1382)

Affected Products and Versions

Affected Product and Version(s)

| Product and Version shipped as a component
—|—
IBM Security Directory Server Version 6.4| IBM WebSphere Application Server Version 8.5.0.0 through 8.5.5.11
IBM Security Directory Server Version 6.3.1 and
Tivoli Directory Server Version 6.3| IBM WebSphere Application Server Version 7.0.0.0 through 7.0.0.43

Remediation/Fixes

For V8.5.0.0 through 8.5.5.11:
· Upgrade to minimal fix pack levels as required by interim fix and then apply Interim Fix PI79343
--OR–
· Apply Fix Pack 8.5.5.12 or later.

For V7.0.0.0 through 7.0.0.43:
· Upgrade to a minimal fix pack levels as required by interim fix and then apply Interim Fix PI79343

--OR–
· Apply Fix Pack 7.0.0.45 or later (targeted availability 2Q 2018).