IBM WebSphere Application Server for z/OS JAX-WS WS-Security Vulnerability

Last Update Date: 6 Sep 2013 09:52 Release Date: 6 Sep 2013 4085 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

A vulnerability has been identified in IBM WebSphere Application Server for z/OS, which is caused due to an unspecified error when using JAX-WS WS-Security configured for XML Digital Signature. No further information is currently available.

Impact

Remote Code Execution

System / Technologies affected

IBM WebSphere Application Server 6.1.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Apply APAR PM95469 or update to version 6.1.0.47

Vulnerability Identifier

No CVE information is available

Source

Secunia
IBM