Security Bulletin: A Security Vulnerability Has Been Identified In IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2020-2654)

2020-04-2015:50:53

www.ibm.com

0.001 Low

EPSS

Percentile

28.7%

JSON

Summary

IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

IBM Security Access Manager for Enterprise Single Sign-On 8.2.0, 8.2.1, 8.2.2

Remediation/Fixes

Principal Product and Version(s)	Affected Supporting Product and Version	Affected Supporting Product Security Bulletin
IBM Security Access Manager for Enterprise Single Sign-On 8.2.0	IBM WebSphere Application Server 7.0	Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition
IBM Security Access Manager for Enterprise Single Sign-On 8.2.1	IBM WebSphere Application Server 7.0, 8.5	Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2	IBM WebSphere Application Server 8.5	Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm security access manager for enterprise single sign-oneq8.2.0
ibm security access manager for enterprise single sign-oneq8.2.1
ibm security access manager for enterprise single sign-oneq8.2.2

Name	Operator	Version
ibm security access manager for enterprise single sign-on	eq	8.2.0
ibm security access manager for enterprise single sign-on	eq	8.2.1
ibm security access manager for enterprise single sign-on	eq	8.2.2