IBM Support

PH43223:WebSphere Liberty is vulnerable to Clickjacking (CVE-2021-39038)

Download


Downloadable File

File link File size File description

Abstract

WebSphere Liberty is vulnerable to Clickjacking (CVE-2021-39038)

Download Description

PH43223 resolves the following problem:

ERROR DESCRIPTION:
WebSphere Liberty is vulnerable to Clickjacking (CVE-2021-39038)
 The APAR for this issue that applies to WebSphere Application Server is PH43760.


PROBLEM SUMMARY:
WebSphere Liberty is vulnerable to Clickjacking (CVE-2021-39038)

PROBLEM CONCLUSION:
Confidential for CVE-2021-39038.

The fix for this APAR currently targeted for inclusion in fix pack 21.0.0.3.

For more information, see 'Recommended Updates for WebSphere Application Server':
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Prerequisites

None

Installation Instructions

Review the readme.txt for detailed installation instructions.
Readme files
URL SIZE (Bytes)
22.0.0.2 IM readme file 2110
21.0.0.12 IM readme file 2120
22.0.0.2 Archive readme file 3153
21.0.0.12 Archive readme file 3157
21.0.0.9 Archive readme file 3049

Download Package

Important note: WebSphere Application Server and Liberty fix access requires S&S Entitlement in 2021. Use properly registered IDs to download the fixes in this table.
Download files
DOWNLOAD RELEASE DATE SIZE (BYTES) FIXPACK URL
Installation Manager fixes
22.0.0.2-WS-WLP-IFPH43223 21 February 2022 11099048 22.0.0.2 FC
21.0.0.12-WS-WLP-IFPH43223 21 February 2022 11124787 21.0.0.12 FC
21.0.0.9-WS-WLP-IFPH43223 21 February 2022 10550685 21.0.0.9 FC
Archive fixes
22002-wlp-archive-IFPH43223 21 February 2022 11036092 22.0.0.2 FC
210012-wlp-archive-IFPH43223 21 February 2022 11061981 21.0.0.12 FC
21009-wlp-archive-IFPH43223 21 February 2022 10487857 21.0.0.9 FC
Note: FC stands for Fix Central. Review the What is Fix Central (FC)? FAQs for more details.

Problems Solved

PH43223

On

Technical Support

Contact IBM Support at https://www.ibm.com/software/mysupport/s/ or 1-800-IBM-SERV (US only).

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Component":"General","Platform":[{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"},{"code":"PF010","label":"HP-UX"},{"code":"PF027","label":"Solaris"},{"code":"PF017","label":"Mac OS"},{"code":"PF002","label":"AIX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"}],"Version":"21.0.0.12;21.0.0.9;22.0.0.2","Edition":"Base","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
02 March 2022

UID

ibm16558256