Lucene search

K
ibmIBM7487E6415116FF46DF0716937C6CFB5FCA92C62DC5EFF43DE1A410F2662F279A
HistoryApr 20, 2022 - 5:04 p.m.

Security Bulletin: Information disclosure in WebSphere Application Server may affect IBM InfoSphere Global Name Management (CVE-2019-4441)

2022-04-2017:04:55
www.ibm.com
7

Summary

There is a potential information disclosure vulnerability in the IBM WebSphere Application Server shipped as part of the IBM InfoSphere Global Name Management product. This could allow a remote attacker to obtain some limited information when a stack trace is returned in the browser. The trace shows some general stack frames within WebSphere, but it does not disclose any data held in Global Name Management.

Vulnerability Details

Refer to the security bulletins(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
IBM InfoSphere Global Name Management 6.0

Remediation/Fixes

Per original security bulletin, apply WebSphere Liberty Fix Pack 19.0.0.11 or later.

Workarounds and Mitigations

None

CPENameOperatorVersion
infosphere global name managementeq6.0
Related for 7487E6415116FF46DF0716937C6CFB5FCA92C62DC5EFF43DE1A410F2662F279A