IBMD77354293ADDF3F8579814EAC2B35D20D0CD45ED626E77A317D6AFE7D4D18A9DSecurity Bulletin: Vulnerability has been identified in WebSphere Application Server Liberty shipped with Cloud Pak System (CVE-2022-24839)
0.002 Low
EPSS
Percentile
56.9%
Summary
Vulnerability has been identified in WebSsphere Application Server Liberty shipped wioth Cloud Pak System. IBM Cloud Pak System ships with optional Single- Sign-On (SSO) feature. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty have been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) Version(s) | Affected Supporting Product(s) Version(s) |
|---|---|
| IBM Cloud Pak System 2.3 | WebSphere Application Server - Liberty 9.0 |
| IBM Cloud Pak System Software Suite 2.3.3.0 | WebSphere Application Server - Liberty 9.0 |
Remediation/Fixes
Consult the following Security Bulletins for information and details about fixes. IBM strongly recommends to apply fix as soon as practical.
In order to apply the fix
1. Download the fix from IBM FixCentral
2. Upload the fix to Cloud Pak System
3. Apply the fix from CPS UI select WAS virtual system instance, manage, operations and fixpack, or through the command line.
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm cloud pak system software | eq | 2.3 |
Related
0.002 Low
EPSS
Percentile
56.9%