Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational ClearQuest (CVE-2015-1920)

Summary

IBM WebSphere Application Server is shipped as a component of IBM Rational ClearQuest. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (CVE-2015-1920) for vulnerability details and information about fixes.

Affected Products and Versions

• ClearQuest Web 7.1 and above.

Remediation/Fixes

Follow instructions for updating your version of WebSphere Application Server to a version that includes the fixes.

For ClearQuest 8.x
These releases use an installation of WAS separately installed and maintained from the ClearQuest installation. Determine the version of WAS that your deployment is using and follow the instructions at Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (CVE-2015-1920) to update your version of WebSphere Application Server.

For ClearQuest 7.1.x

These releases ship with, install and configure WAS version 6.1.0.25. Download the appropriate fix from from Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (CVE-2015-1920) but for installation instructions, follow technote 1390803: How to update the IBM WebSphere Application Server components in Rational ClearCase and Rational ClearQuest 7.1.