CLSA-2026-1775739369 pki-servlet-engine: Fix of 3 CVEs

CVE-2024-52316: fix JASPIC authentication bypass on ServerAuthContext exception - CVE-2025-55754: fix ANSI escape sequence injection in log messages - CVE-2025-46701: fix CGI servlet case sensitivity bypass of security constraints...

CVE-2018-1755

CVE-2018-1755 affects IBM WebSphere Application Server Liberty. It allows remote information disclosure when Liberty is configured to use JASPIC/JSR375 and permits access on non-secure ports due to incorrect transport. IBM security bulletins advise upgrading Liberty to a fixed release (18.0.0.3 o...

CVE-2018-1755

IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incorrect transport being used when Liberty is configured to use Java Authentication SPI for Containers JASPIC. This can happen when the Application Server is configured to permit...

CVE-2018-1755

IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incorrect transport being used when Liberty is configured to use Java Authentication SPI for Containers JASPIC. This can happen when the Application Server is configured to permit...

Authentication flaw

IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incorrect transport being used when Liberty is configured to use Java Authentication SPI for Containers JASPIC. This can happen when the Application Server is configured to permit...