Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities in Apache log4j (CVE-2021-4104, CVE-2021-45046)

2022-01-1008:04:51

www.ibm.com

ibm websphere application server

jazz for service management

apache log4j

cve-2021-4104

cve-2021-45046

security bulletin

interim fix

EPSS

0.973

Percentile

99.9%

JSON

Summary

Multiple vulnerabilities in Apache log4j affect the IBM WebSphere Application Server and IBM WebSphere Application Server Liberty (CVE-2021-4104, CVE-2021-45046)

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
Jazz for Service Management	1.1.3

Remediation/Fixes

Principal Product and Version(s)	Affected Supporting Product and Version	Affected Supporting Product Security Bulletin
Jazz for Service Management version 1.1.3 - 1.1.3.13	Websphere Application Server Full Profile 8.5.5	Security Bulletin: Multiple vulnerabilities in Apache log4j affect the IBM WebSphere Application Server and IBM WebSphere Application Server Liberty (CVE-2021-4104, CVE-2021-45046)
Jazz for Service Management version 1.1.3.7 - 1.1.3.13