Security Bulletin: A security vulnerability has been identified in the WebSphere Application Server where the Rational Asset Manager is deployed. (CVE-2016-1000031)

Summary

In the WebSphere Application Server (WAS) where the Rational Asset Manager(RAM) is deployed, a potential vulnerability in the Apache Commons FileUpload is identified. Information about this security vulnerability affecting WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the Remediation/Fixes section.

Affected Products and Versions

Rational Asset Manager 7.5.3.2 and earlier.

Remediation/Fixes

The remediation is applicable for both Rational Asset Manager and WebSphere Application Server (WAS).

For applying fix on WAS, refer to the security bulletin specified in the following table for information about fixes.

Affected Supporting Product |

Affected Supporting Product Security Bulletin
—|—

IBM WebSphere Application Server Version 8.0, 8.5 and 8.5.5 |

Security Bulletin: Security vulnerability in Apache Commons FileUpload used by WebSphere Application Server (CVE-2016-1000031)

NOTE: For support on other Rational Asset Manager versions, please contact IBM support.

Workarounds and Mitigations

None.