Security Bulletin: A security vulnerability ( CVE-2020-5016 ) has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights

Summary

Websphere Application Server (WAS) is shipped as a component of IBM Operations Analytics Predictive Insights. Information about WebSphere Application Server vulnerability( CVE-2020-5016 ) to a directory traversal vulnerability has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

For more information and recommended solutions see the full details disclosed in the security bulletin: WebSphere Application Server is vulnerable to a directory traversal vulnerability (CVE-2020-5016)

In summary, details for Predictive Insights WebSphere only:

For WebSphere v9.0.0.0 through 9.0.5.5:

For more information and recommended solutions see the full details disclosed in the security bulletin: Security Bulletin: WebSphere Application Server is vulnerable to a directory traversal vulnerability (CVE-2020-5016)

For WebSphere v8.5.0.0 through 8.5.5.18:

For more information and recommended solutions see the full details disclosed in the security bulletin: WebSphere Application Server is vulnerable to a directory traversal vulnerability (CVE-2020-5016)

Workarounds and Mitigations

None