Security Bulletin: Vulnerability in WebSphere Application Server affects IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2020-4629)

2020-10-1605:33:00

www.ibm.com

websphere application server

ibm cloud orchestrator

enterprise

vulnerability

upgrade

cve-2020-4629

EPSS

Percentile

5.1%

JSON

Summary

WebSphere Application Server is shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. Vulnerability has been identified in WebSphere Application Server and the information about the fix is published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
Cloud Orchestrator	2.5.0.10

Remediation/Fixes

The recommended solution is to manually upgrade to the appropriate WebSphere Application Server Interim Fix on IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5.0.10.

Consult the following WebSphere Application Server security bulletin for the vulnerability details and information about the fix:

Security Bulletin: WebSphere Application Server is vulnerable to an information disclosure vulnerability (CVE-2020-4629)