Security Bulletin: Security Vulnerability within IBM WebSphere Application Server that shipped with WebSphere Enterprise Service Bus Registry Edition (CVE-2015-1920)

Summary

WebSphere Application Server that is provided with WebSphere Enterprise Service Bus Registry Edition could allow a remote attacker to execute arbitrary code by connecting to a management port and executing a specific sequence of instructions.

Vulnerability Details

The vulnerability is fixed with an available interim fix. For more information on the fix see Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (CVE-2015-1920)

Affected Products and Versions

WebSphere Enterprise Service Bus Registry Edition (All Versions)

Workarounds and Mitigations

None