IBM Support

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-20517)

Security Bulletin


Summary

IBM WebSphere Application Server ND shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises is vulnerable to a Directory Traversal vulnerability.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)Version(s)
IBM Predictive Maintenance and QualityAll
IBM Maximo APM - Predictive Maintenance Insights On-Premises1.0.3

Remediation/Fixes

Vulnerability details:
WebSphere Application Server ND is vulnerable to a directory traversal vulnerability. This has been addressed. The recommended solution is to manually upgrade to the Interim Fix on IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises installations for WebSphere Application Server ND.

Security bulletin link:  https://www.ibm.com/support/pages/node/6456955
 

Workarounds and Mitigations

None

Get Notified about Future Security Bulletins

References

Off

Change History

11 Feb 2022: Initial Publication

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTNNL","label":"Predictive Maintenance and Quality"},"Component":"","Platform":[{"code":"PF043","label":"Red Hat"}],"Version":"2.6.3","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}},{"Business Unit":{"code":"BU005","label":"IoT"},"Product":{"code":"SS7TH3","label":"IBM IoT Predictive Maintenance and Optimization"},"Component":"","Platform":[{"code":"PF043","label":"Red Hat"}],"Version":"All","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
16 February 2022

Initial Publish date:
11 February 2022

UID

ibm16557066