Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase (CVE-2015-7450)

Summary

IBM WebSphere Application Server is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Vulnerability in Apache Commons affects IBM WebSphere Application Server (CVE-2015-7450) for vulnerability details and information about fixes.

Affected Products and Versions

IBM Rational ClearCase, CCRC WAN server/CM Server component.

Versions 8.0.0.x, 8.0.1.x:

This vulnerability only applies to the CCRC WAN server component.
Versions 7.1.x.x:

Not affected.

Remediation/Fixes

Review the security bulletin referenced above and apply the relevant fixes to your WAS installation used for ClearCase.

Affected Versions

|

** Applying the fix**

—|—
8.0.0.x
8.0.1.x| Apply the appropriate WebSphere Application Server fix directly to your CCRC WAN server host. No ClearCase-specific steps are necessary.