The WebSphere Application Server must apply the latest security fixes.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-81399	WBSP-AS-001750	SV-96113r1_rule		Medium

Description

Security vulnerabilities are often addressed by testing and applying the latest security patches and fix packs. Latest fixpacks can be found at: http://www-01.ibm.com/support/docview.wss?uid=swg27009661

STIG	Date
IBM WebSphere Traditional V9.x Security Technical Implementation Guide	2018-08-24

Details

Check Text (C-81109r1_chk)

Use the admin console to determine the WebSphere version.

Review patch level and fix pack.

If the most recent patches/fix packs have not been applied, this is a finding.

Fix Text (F-88185r1_fix)

Obtain WebSphere product security and patch support.

Test and apply the latest applicable WebSphere security fixes.