Security Bulletin: A security vulnerability has been identified in IBM WebSphere Applicaiton Server shipped with Rational RequisitePro (CVE-2014-0114)

Summary

A security vulnerability has been identified in WebSphere Application Server shipped with IBM Rational RequisitePro.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

Review Security Bulletin: Classloader Manipulation Vulnerability in IBM WebSphere Application Server for vulnerability details.

Affected Products and Versions

IBM Rational RequisitePro versions 7.1.0 through 7.1.1.9, 7.1.2 through 7.1.2.13.01 and 7.1.3 through 7.1.3.10.01 ship with or require versions of WebSphere Application Server that are affected.

Remediation/Fixes

Review the Remediation/Fixes section of Security Bulletin: Classloader Manipulation Vulnerability in IBM WebSphere Application Server for links to the the downloads to resolve this issue.

Review technote 1390803: Update the WebSphere Application Server components in Rational ClearCase and Rational ClearQuest 7.1 for instructions on updating WebSphere Application Server.

Workarounds and Mitigations

None