Security Bulletin
Summary
There are multiple vulnerabilities in the IBM Java SDK that is used by IBM WebSphere Application Server shipped as part of IBM InfoSphere Global Name Management.
Vulnerability Details
Link to security bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10873332
Affected Products and Versions
Remediation/Fixes
Global Name Management 6.0: Apply IBM SDK, Java Technology Edition, Version 8 Service Refresh 5 Fix Pack 30 or a subsequent release, as available from IBM Fix Central. IBM recommends installing the latest Version 8 Service Refresh 5 release.
Global Name Management 5.0: Upgrade to WebSphere Application Server Fix Pack 8.0.0.15 and then apply interim fix PI96295.
DISCLAIMER: This version of the product uses Java 6, which is now beyond end of support. Customers using IBM InfoSphere Global Name Management 5.0 are encouraged to move to IBM InfoSphere Global Name Management 6.0
Get Notified about Future Security Bulletins
References
Change History
09 August 2019: original document published
*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.
Disclaimer
Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
20 April 2022
UID
ibm10964558