Medium Severity

Security Bulletin: Multiple Vulnerabilities in Apache Commons Compress affect WebSphere Application Server Liberty (CVE-2021-33517, CVE-2021-36090)

Share this post:

There are multiple vulnerabilities in the Apache Commons Compress library that is used by WebSphere Application Server Liberty. This has been addressed.

CVE(s): CVE-2021-35517, CVE-2021-36090

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
WebSphere Application Server Liberty 17.0.0.3 – 21.0.0.9

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6489683
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/205307
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/205310

More stories

Security Bulletin: Cross-Site Scripting Vulnerability Affects Dashboard UI of IBM Sterling B2B Integrator (CVE-2021-29764)

Oct 26, 2021 8:00 pm EDT | Medium Severity

IBM Sterling B2B Integrator has addressed a stored cross-site scripting vulnerability in the Web UI. ...read more


Security Bulletin: Insufficient session expiration in IBM i2 iBase

Oct 26, 2021 8:00 pm EDT | Medium Severity

IBM i2 iBase provides insufficient login sessioon timeouts ...read more


Security Bulletin: Cross-Site Scripting Vulnerability Affects Dashboard UI of IBM Sterling B2B Integrator (CVE-2021-29764)

Oct 25, 2021 8:00 pm EDT | Medium Severity

IBM Sterling B2B Integrator has addressed a stored cross-site scripting vulnerability in the Web UI. ...read more