Security Bulletin: Vulnerability in Apache MyFaces affects WebSphere Application Server (CVE-2021-26296)

2021-04-1304:40:02

www.ibm.com

0.002 Low

EPSS

Percentile

57.3%

JSON

Summary

IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

8.2.0, 8.2.1, 8.2.2

Remediation/Fixes

Principal Product and Version(s)	Affected Supporting Product and Version	Affected Supporting Product Security Bulletin
IBM Security Access Manager for Enterprise Single Sign-On 8.2.0	IBM WebSphere Application Server 7.0	Security Bulletin: Vulnerability in Apache MyFaces affects WebSphere Application Server (CVE-2021-26296)
IBM Security Access Manager for Enterprise Single Sign-On 8.2.1	IBM WebSphere Application Server 7.0, 8.5	Security Bulletin: Vulnerability in Apache MyFaces affects WebSphere Application Server (CVE-2021-26296)
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2	IBM WebSphere Application Server 8.5	Security Bulletin: Vulnerability in Apache MyFaces affects WebSphere Application Server (CVE-2021-26296)

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm security access manager for enterprise single sign-oneq8.2.0
ibm security access manager for enterprise single sign-oneq8.2.1
ibm security access manager for enterprise single sign-oneq8.2.2

Name	Operator	Version
ibm security access manager for enterprise single sign-on	eq	8.2.0
ibm security access manager for enterprise single sign-on	eq	8.2.1
ibm security access manager for enterprise single sign-on	eq	8.2.2

0.002 Low

EPSS

Percentile

57.3%

JSON

Related for 05FD9E57C44DDF98CAA51139BE802E72D24674C8F603036ABEF9E6CC274A6344