Lucene search

IBMED9253C7585DBEACFE86395EFC2926D8FB5E497055F306F5A58D6830EF6F35BD

HistoryJun 24, 2024 - 4:16 p.m.

Security Bulletin: A vulnerability in Node.js affects IBM Rational® Application Developer for WebSphere® Software (CVE-2024-27980)

2024-06-2416:16:19

www.ibm.com

node.js

ibm rational

application developer

websphere

security bulletin

cve-2024-27980

upgrade

7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

Summary

Node.js is used as runtime and SDK for Apache Cordova applications within IBM Rational® Application Developer for WebSphere® Software. Information about security vulnerabilities affecting Node.js has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
Rational Application Developer	9.6
Rational Application Developer	9.7

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now by upgrading to Node.js 18.x, please follow Upgrading the Node.js that is used by Cordova or NodeRed to upgrade.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmrational_application_developer_for_websphereMatch9.6

ibmrational_application_developer_for_websphereMatch9.7

CPENameOperatorVersion
rational application developer for websphere softwareeq9.6
rational application developer for websphere softwareeq9.7

CPE	Name	Operator	Version
	rational application developer for websphere software	eq	9.6
	rational application developer for websphere software	eq	9.7