IBM Support

IT49376: IBM STORAGE INSIGHTS SECURITY APAR FOR CWE-147

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • This advisory is created for product profiles which have
    registered a dependency on WebSphere Application Server Liberty
    in PSIRT ServiceNow.
    
    This addresses an update to the OSS included in WebSphere
    Application Server Liberty.
    
    Security bulletin link:
    https://www.ibm.com/support/pages/node/7250200
    
    Features affected: WebSphere Liberty using the javaMail-1.5,
    javaMail-1.6, mail-2.0, or mail-2.1 features.
    
    This affects IBM WebSphere Application Server Liberty 17.0.0.3 -
    25.0.0.11 with the specified features enabled.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * IBM Storage Insights users                                   *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * SECURITY APAR FOR:                                           *
    * CWE-147                                                      *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    

Problem conclusion

  • The fix for this APAR is contained in the following release:
    
    IBM Storage Insights 2Q26   [ 54X-IBM-SI ]
    ( release target 2Q 2026 / June )
    
    To protect IBM Storage Insights against emerging
    security vulnerabilities, the service was updated to
    protected against vulnerabilities.
    
    No action is required, there is nothing that you need
    to do following the IBM Storage Insights upgrade.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT49376

  • Reported component name

    STORAGE INSIGHT

  • Reported component ID

    5608TPCSI

  • Reported release

    54X

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2026-05-11

  • Closed date

    2026-05-12

  • Last modified date

    2026-05-12

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    STORAGE INSIGHT

  • Fixed component ID

    5608TPCSI

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSQRB8","label":"IBM Storage Insights"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"54X","Line of Business":{"code":"LOB69","label":"Storage TPS"}}]

Document Information

Modified date:
12 May 2026