Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway

Summary

IBM WebSphere Application Server is shipped as a component of IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway. Information about multiple security vulnerabilities affecting IBM WebSphere Application Server have been published in security bulletins.

Vulnerability Details

Please consult the security bulletin, Security Bulletin: Information disclosure in Apache Commons HttpClient used by WebSphere Application Server (CVE-2012-5783), for vulnerability details and information about fixes.

Please consult the security bulletin, Security Bulletin: Information Disclosure in WebSphere Application Server (CVE-2018-1621), for vulnerability details and information about fixes.

Please consult the security bulletin, Security Bulletin: Weaker than expected security in WebSphere Application Server (CVE-2018-1719), for vulnerability details and information about fixes.

Please consult the security bulletin, Security Bulletin: Potential Privilege Escalation Vulnerability in WebSphere Application Server (CVE-2018-1901), for vulnerability details and information about fixes.

Please consult the security bulletin, Security Bulletin: Potential Remote code execution vulnerability in WebSphere Application Server (CVE-2018-1904), for vulnerability details and information about fixes.

Please consult the security bulletin, Security Bulletin: Potential cross-site request forgery in WebSphere Application Server Admin Console (CVE-2018-1926), for vulnerability details and information about fixes.

Affected Products and Versions

Workarounds and Mitigations

None