Security Bulletin
Summary
FileNet Content Management Interoperability Services (CMIS) is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting FileNet Content Management Interoperability Services (CMIS) has been published in a separate security bulletin.
Vulnerability Details
Please consult the security bulletin Security Bulletin: FileNet Content Management Interoperability Services (CMIS), which ships with IBM Content Navigator, is affected by the ability to parse untrusted XML input containing a reference to an external entity for vulnerability details and information about fixes.
Affected Products and Versions
This vulnerability affects the following versions and releases:
- IBM Case Manager 5.2.0.0 - 5.2.0.4
- IBM Case Manager 5.2.1.0 - 5.2.1.7
- IBM Case Manager 5.3.0.0
- IBM Case Manager 5.3.1.0
- IBM Case Manager 5.3.2.0
- IBM Case Manager 5.3.3.0
Remediation/Fixes
|
Product |
VRMF
|
APAR
|
Remediation/First Fix
|
|---|---|---|---|
| IBM Case Manager | 5.3.0.0 - 5.3.3.0 | PJ45479 | 5.3.3.0-ICM-IF001 or later versions |
| IBM Case Manager | 5.2.1.0 - 5.2.1.7 | PJ45496 | 5.2.1.7-ICM-IF004 or later versions |
| IBM Case Manager | 5.2.0.0 - 5.2.0.4 | PJ45497 | 5.2.0.4-ICM-IF003 or later versions |
Get Notified about Future Security Bulletins
References
Change History
30 Sept, 2018: Original Version Published
*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.
Disclaimer
Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.
Internal Use Only
APAR - 309651
CQ ecmdb00094446
CQ ecmdb00094447
Was this topic helpful?
Document Information
Modified date:
04 September 2018
UID
ibm10730303