IBM Support

Security Bulletin: A security vulnerability has been identified in IBM Java Runtime shipped with WebSphere Partner Gateway Advanced/Enterprise editions (CVE-2016-5597)

Created by Usha Ladkani on
Published URL:
https://www.ibm.com/support/pages/node/291067
291067

Security Bulletin


Summary

IBM Java Runtime is shipped as a component of WebSphere Partner Gateway Advanced/Enterprise editions. Information about a vulnerability in IBM Java Runtime has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for vulnerability details and information about fixes.

Affected Products and Versions

WebSphere Partner Gateway Advanced/Enterprise Edition Versions 6.2.0.0, 6.2.0.1, 6.2.0.2, 6.2.0.3, 6.2.0.4, 6.2.0.5, 6.2.1.0, 6.2.1.1, 6.2.1.2, 6.2.1.3, 6.2.1.4

Remediation/Fixes

The recommended solution is to apply the iFix as soon as practical. Please see below for information about the fixes available.

ProductVRMFAPARHow to acquire fix
WebSphere Partner Gateway Advanced Edition6.2.0.0, 6.2.0.1, 6.2.0.2, 6.2.0.3, 6.2.0.4, 6.2.0.5, 6.2.1.0, 6.2.1.1, 6.2.1.2, 6.2.1.3, 6.2.1.4 NoneAdvanced Edition Fix Pack 6.2.1.5
WebSphere Partner Gateway Enterprise Edition6.2.0.0, 6.2.0.1, 6.2.0.2, 6.2.0.3, 6.2.0.4, 6.2.0.5, 6.2.1.0, 6.2.1.1, 6.2.1.2, 6.2.1.3, 6.2.1.4 NoneEnterprise Edition Fix pack 6.2.1.5

Workarounds and Mitigations

Apply WPG 6.2.1.5

Get Notified about Future Security Bulletins

References

Off

Change History

25 May 2017: Original version published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.

Internal Use Only

PSIRT Advisory 6974, Product Record No. 86287 and 86288

[{"Product":{"code":"SSDKJ8","label":"WebSphere Partner Gateway Enterprise Edition"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"6.2.1.1;6.2.1.0;6.2.0.5;6.2.0.4;6.2.0.3;6.2.0.2;6.2.0.1;6.2;6.2.1.2;6.2.1.3;6.2.1.4","Edition":"Advanced;Enterprise","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
13 October 2019

UID

swg21998212