1.0 Introduction
Recently, IBM has released security updates to address multiple vulnerabilities in IBM WebSphere Application Server Liberty.
2.0 Impact
Successful exploitation of these vulnerabilities may allow a remote attacker to trigger denial of service, elevation of privilege, sensitive information disclosure and data manipulation on the targeted system. This may lead to service disruption, unauthorised access to sensitive information and system compromise.
3.0 Affected Products
- IBM WebSphere Application Server - Liberty versions prior to 26.0.0.10
4.0 Recommendation
CyberSecurity
Malaysia encourages users and administrators to review the following IBM
security bulletins and apply the necessary updates. Users are advised to update
IBM WebSphere Application Server Liberty to version 26.0.0.10 or later.
Kindly refer to the following URL:
Generally, we advise users to be
updated with the latest security announcements by the vendor and follow best
practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999
Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my
5.0 References