A vulnerability has been reported in IBM WebSphere Application Server for z/OS, which can be exploited by malicious, local users to bypass certain security restrictions.

The vulnerability is caused due to an error when performing CBIND checks and can be exploited to access or modify otherwise restricted application data.

The vulnerability is reported in versions 8.5, 8.0 through 8.0.0.4, 7.0 through 7.0.0.23, and 6.1.0 through 6.1.0.43.

Solution
Apply APAR PM61388 or update to version 8.5.0.1, 8.0.0.5, 7.0.0.25, or 6.1.0.45 when available.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
IBM (PM61388):
http://www.ibm.com/support/docview.wss?uid=swg21611313

Deep Links
Links available to Secunia VIM customers