Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server bundled with IBM WebSphere Application Server Patterns

Summary

WebSphere Application Server is shipped as a component of IBM WebSphere Application Server Patterns. Information about a security vulnerability affecting WebSphere Application Server has been published in multiple security bulletins.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s)

|

Affected Supporting Product and Version

—|—
IBM WebSphere Application Server Patterns, all versions| WebSphere Application Server:

• Liberty
• 9.0
• 8.5
• 8.0

Remediation/Fixes

Please consult the following security bulletin for vulnerability details and information about fixes.

• WebSphere Application Server is vulnerable to Information Disclosure (CVE-2021-29842)

• Multiple Vulnerabilities in Apache Commons Compress affect WebSphere Application Server Liberty (CVE-2021-33517, CVE-2021-36090)

Workarounds and Mitigations

None