Ibm was Liberty Profile oidc xss Vulnerability (CVE-2016-0283)

Ibm was Liberty Profile oidc xss Vulnerability (CVE-2016-0283)
Ibm was Liberty Profile oidc xss Vulnerability (CVE-2016-0283)

Release date:
Updated on:

Affected Systems:

Ibm was Liberty Profile <8.5.5.9

Description:

CVE (CAN) ID: CVE-2016-0283

IBM WebSphere Application Server (WAS) Liberty Profile is an overview of dynamically combined Application servers.

In versions earlier than IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5.9, The OIDC client Web Application has the cross-site scripting vulnerability, which allows remote attackers to construct URLs, attackers can exploit this vulnerability to inject arbitrary Web scripts or HTML.

<* Source: IBM (ncsupp@ca.ibm.com)
*>

Suggestion:

Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www-01.ibm.com/support/docview.wss? Uid = swg21978293

Http://www-01.ibm.com/support/docview.wss? Uid = swg1PI58003

This article permanently updates the link address: