Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM WebSphere Application Server Liberty is vulnerable to spoofing - CVE-2022-39161

Summary

IBM WebSphere Application Server Liberty are vulnerable to spoofing via the optional and separately installable Web Server Plug-ins for IBM WebSphere Application Server component. Following IBM® Engineering Lifecycle Engineering product is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Requirements Management DOORS Next

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

CVE-2022-39161 may affect IBM® Engineering Lifecycle Engineering product mentioned above, which uses IBM WebSphere Application Server Liberty.

This affects IBM WebSphere Application server Liberty with Web Server Plug-ins for Web Server Plug-ins versions 8.5 and 9.0.

If any of the mentioned affected product is deployed on one of the above versions, Please follow the instruction given in the following article.

Link: <https://www.ibm.com/support/pages/node/6987779&gt;

Workarounds and Mitigations

None