Security Bulletin
Summary
There are multiple vulnerabilities in the IBM Java SDK that is used by IBM WebSphere Application Server shipped as part of IBM InfoSphere Identity Insight.
Vulnerability Details
Link to security bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10873332
Affected Products and Versions
Remediation/Fixes
IBM InfoSphere Identity Insight version 9.0: Apply IBM SDK, Java Technology Edition, Version 8 Service Refresh 5 Fix Pack 30 or a subsequent release, as available from IBM Fix Central. IBM recommends installing the latest Version 8 Service Refresh 5 release.
IBM InfoSphere Identity Insight version 8.1: Upgrade to WebSphere Application Server Fix Pack 7.0.0.45, and then apply Interim Fix PI96297.
DISCLAIMER: This version of the product uses Java 6, which is now beyond end of support. Customers using IBM InfoSphere Identity Insight 8.1 are encouraged to move to IBM InfoSphere Identity Insight 9.0.
Get Notified about Future Security Bulletins
References
Change History
09 August 2019: original document published
*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.
Disclaimer
Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
21 August 2019
UID
ibm10964556