Security Bulletin: Information disclosure in Apache Commons HttpClient may affect WebSphere Application Server as part of IBM InfoSphere Global Name Management (CVE-2012-5783)

Summary

There is a potential information disclosure in Apache Commons HttpClient used by WebSphere Application Server shipped as part of IBM InfoSphere Global Name Management. This also affects IBM InfoSphere Global Name Management Enterprise Name Search installations.

Vulnerability Details

CVE(s):CVE-2012-5783

Link to security bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22016216

Affected Products and Versions

IBM InfoSphere Global Name Management 5.0

Remediation/Fixes

Upgrade embedded WebSphere to fix pack level 8.0.0.15, and then apply Interim Fix PI96685 and PI98251.

**DISCLAIMER:**This version of the product uses Java 6, which is now beyond end of support. Customers using IBM InfoSphere Global Name Management 5.0 are encouraged to move to IBM InfoSphere Global Name Management 6.0