Security Bulletin: Multiple Security Vulnerabilities have been identified in IBM Websphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On

Summary

IBM Websphere Application Server is shipped as a component of IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM Websphere Application Server has been published in a Security Bulletin.

Vulnerability Details

Consult the Security Bulletin Code execution vulnerability in WebSphere Application Server (CVE-2016-5983) for vulnerability details and information about fixes.

Consult the Security Bulletin Potential Information Disclosure vulnerability in WebSphere Application Server (CVE-2016-5986) for vulnerability details and information about fixes.

Affected Products and Versions

Affected Products and versions

| Affected Components
—|—
ISAM ESSO 8.2, 8.2.1, 8.2.2| IBM Websphere Application Server 7.0, 8.5.0

Remediation/Fixes

None

Workarounds and Mitigations

None