Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security Directory Server (CVE-2016-9736)

Summary

IBM Websphere Application Server is shipped as a component of IBM Security Directory Server. Information about a security vulnerability affecting IBM Websphere Application Server has been published in a security bulletin.

Vulnerability Details

Please see the following security bulletin for vulnerability details:
Potential Information Disclosure in WebSphere Application Server using malformed SOAP requests on WebSphere Application Server.(CVE-2016-9736).

Affected Products and Versions

Affected Product and Version(s)

| Product and Version shipped as a component
—|—
IBM Security Directory Server Version 6.4| IBM WebSphere Application Server Version 8.5.5.9

Remediation/Fixes

Apply WebSphere Application Server Fix Pack 8.5.5.11.
After the above we can refer to SDS recommended fixes .