Vulnerability Bulletins |
IBM Security Bulletin: Cross-site scripting vulnerability in Liberty for Java for IBM Bluemix (CVE-2016-0283) |
|
| Affected software | IBM |
|
There is a cross-site scripting vulnerability in Liberty for Java for IBM Bluemix when using the OpenID Connect (OIDC) client. CVE(s): CVE-2016-0283Affected product(s) and affected version(s):This vulnerability affects all versions of Liberty for Java in IBM Bluemix up to and including v2.6. Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21980429X-Force Database: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_cross_site_scripting_vulnerability_in_liberty_for_java_for_ibm_bluemix_cve_2016_0283?lang=en_us |
|