Privilege escalation in WebSphere Application Server Admin Console (CVE-2017-1731)
PI89498 resolves the following problem:
ERROR DESCRIPTION:
Privilege escalation in WebSphere Application Server Admin Console (CVE-2017-1731)
LOCAL FIX:
N/A
PROBLEM SUMMARY:
Privilege escalation in WebSphere Application Server Admin Console (CVE-2017-1731)
PROBLEM CONCLUSION:
The following interim fixes are provided:
7.0.0.35-WS-WAS-IFPI89498 applies to fixpacks 7.0.0.35 through 7.0.0.43.
8.0.0.4-WS-WAS-IFPI89498 applies to fixpacks 8.0.0.4 through 8.0.0.14.
8.5.5.7-WS-WASProd-IFPI89498 applies to fixpacks 8.5.5.7 through 8.5.5.13.
9.0.0.0-WS-WASProd-IFPI89498 applies to fixpacks 9.0.0.0 through 9.0.0.6.
Please review the readme.txt for detailed installation instructions.
[{"INLabel":"V80 Readme","INLang":"US English","INSize":"2338","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI89498/8.0.0.14/readme.txt"},{"INLabel":"V70 Readme","INLang":"US English","INSize":"4981","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI89498/7.0.0.43/readme.txt"},{"INLabel":"V90 Readme","INLang":"US English","INSize":"2245","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI89498/9.0.0.6/readme.txt"},{"INLabel":"V85 Readme","INLang":"US English","INSize":"2357","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI89498/8.5.5.12/readme.txt"}]
On
[{"DNLabel":"9.0.0.0-WS-WASProd-IFPI89498","DNDate":"01-24-2018","DNLang":"US English","DNSize":"274107","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%2FWebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=9.0.0.0-WS-WASProd-IFPI89498&includeSupersedes=0","DNURL_FTP":null,"DDURL":null},{"DNLabel":"8.5.5.7-WS-WASProd-IFPI89498","DNDate":"01-24-2018","DNLang":"US English","DNSize":"274710","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%2FWebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.5.5.7-WS-WASProd-IFPI89498&includeSupersedes=0","DNURL_FTP":null,"DDURL":null},{"DNLabel":"8.0.0.4-WS-WAS-IFPI89498","DNDate":"01-24-2018","DNLang":"US English","DNSize":"301563","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%2FWebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.0.0.4-WS-WAS-IFPI89498&includeSupersedes=0","DNURL_FTP":null,"DDURL":null},{"DNLabel":"7.0.0.35-WS-WAS-IFPI89498","DNDate":"01-24-2018","DNLang":"US English","DNSize":"17720","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%2FWebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.35-WS-WAS-IFPI89498&includeSupersedes=0","DNURL_FTP":null,"DDURL":null}]
[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"General","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"},{"code":"PF013","label":"Inspur K-UX"}],"Version":"9.0.0.6;9.0.0.5;9.0.0.4;9.0.0.3;9.0.0.2;9.0.0.1;9.0;8.5.5.9;8.5.5.8;8.5.5.7;8.5.5.12;8.5.5.11;8.5.5.10;8.0.0.9;8.0.0.8;8.0.0.7;8.0.0.6;8.0.0.5;8.0.0.4;8.0.0.14;8.0.0.13;8.0.0.12;8.0.0.11;8.0.0.10;7.0.0.43;7.0.0.41;7.0.0.39;7.0.0.37;7.0.0.35;8.5.5.13","Edition":"Advanced;Base;Developer;Enterprise;Express;Network Deployment;Single Server","Line of Business":{"code":"LOB45","label":"Automation"}}]
Problems (APARS) fixed
Problems (APARS) fixed