IBMFABD482E3C9772D9D7445B9E944A159CB83C5B57296685BFC517E8B0EEA18962Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server traditional. Vulnerable to a denial of service due to jose4j (CVE-2023-51775)
Summary
IBM WebSphere Application Server (WAS) is used in IBM Rational ClearQuest server and web components. Information about security vulnerability affecting WAS has been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Rational ClearQuest | 9.1 to 9.1.0.6 |
| IBM Rational ClearQuest | 10.0 to 10.0.5 |
Remediation/Fixes
Refer to the following security bulletin(s) for vulnerability details and information about fixes addressed by IBM WebSphere Application Server (WAS), which is used by IBM Rational ClearQuest.
| Principal Product and Version(s) | Affected Supporting Product and Version | Affected Supporting Product Security Bulletin |
|---|---|---|
| IBM Rational ClearQuest, versions 9.1 to 9.1.0.6, 10.0 to 10.0.5 | IBM WebSphere Application Server versions 8.5 and 9.0. |
ClearQuest Versions
|
Applying the fix
—|—
9.1 to 9.1.0.6, 10.0 to 10.0.5| Apply the appropriate IBM WebSphere Application Server fix (see bulletin link above) directly to your CM server host. No ClearQuest specific steps are necessary.
For 9.0.1.x, 9.0.2.x, and earlier releases, IBM recommends upgrading to a fixed, supported version/release/platform of the product.
Workarounds and Mitigations
None
Affected configurations
Related
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%