Security Bulletin: A security vulnerability has been identified in IBM Workload Deployer shipped with SmartCloud Orchestrator (CVE-2014-6158)

Summary

IBM Workload Deployer is shipped as a component of IBM SmartCloud Orchestrator. Information about a security vulnerability affecting IBM Workload Deployer has been published in a security bulletin.

Vulnerability Details

Review security bulletin Security Bulletin: File path traversal vulnerabilities affect IBM Workload Deployer (CVE-2014-6158) for vulnerability details.

Affected Products and Versions

IBM SmartCloud Orchestrator 2.2, 2.2 Fix Pack1, 2.3, 2.3 Fix Pack 1 up to iFix 5

Remediation/Fixes

Upgrade to IBM SmartCloud Orchestrator 2.3.0.1 iFix 6 or later.

Workarounds and Mitigations

None