Security Bulletin: Remote code execution vulnerability in WebSphere Application Server shipped with IBM Cloud Pak for Applications (CVE-2020-4448)

Summary

WebSphere Application Server is shipped as a component of IBM Cloud Pak for Applications. There is a remote code execution vulnerability in WebSphere Application Server. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

WebSphere Application Server ND and WebSphere Application Server Hypervisor Edition

• 9
• 8.5

WebSphere Virtual Enterprise Edition

• 8
• 7

Remediation/Fixes

Please consult the following security bulletin for vulnerability details and information about fixes

• Remote code execution vulnerability in WebSphere Application Server (CVE-2020-4448)

Workarounds and Mitigations

None