Multiple vulnerabilities have been reported in IBM WebSphere Application Server for z/OS, where one has unknown impacts and others can be exploited malicious, local users to gain escalated privileges and by malicious people to disclose potentially sensitive information and bypass certain security restrictions.

For more information:
SA48214
SA48386
SA48849

The vulnerabilities are reported in versions prior to 7.0.0.23.

Solution
Update to version 7.0.0.23 (Fix Pack 23).

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM (PM45181, PM55760, PM56128, PM58899):
http://www.ibm.com/support/docview.wss?uid=swg1PM53810
http://www.ibm.com/support/docview.wss?uid=swg1PM62907

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers