CVE-2021-29754
First published: Thu Jun 10 2021(Updated: )
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 202006.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Websphere Application Server | >=7.0.0.0<7.0.0.45 | |
| Ibm Websphere Application Server | >=8.0.0.0<8.0.0.15 | |
| Ibm Websphere Application Server | >=8.5.0.0<8.5.5.20 | |
| Ibm Websphere Application Server | >=9.0.0.0<9.0.5.8 | |
| HP HP-UX | ||
| IBM AIX | ||
| IBM i | ||
| Ibm Z\/os | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Oracle Solaris | ||
| <=9.0 | ||
| <=8.5 | ||
| <=8.0 | ||
| <=7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-29754.
What is the severity of CVE-2021-29754?
The severity of CVE-2021-29754 is high with a score of 8.8.
Which versions of IBM WebSphere Application Server are affected?
IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 are affected.
How can I fix the vulnerability in IBM WebSphere Application Server?
To fix the vulnerability, update your IBM WebSphere Application Server to a version that is not vulnerable.
Where can I find more information about CVE-2021-29754?
More information about CVE-2021-29754 can be found at the following references: [link1](https://exchange.xforce.ibmcloud.com/vulnerabilities/202006) and [link2](https://www.ibm.com/support/pages/node/6462627).
- agent/references
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm websphere application server
- version/ibm websphere application server/7.0.0.0
- version/ibm websphere application server/8.0.0.0
- version/ibm websphere application server/8.5.0.0
- version/ibm websphere application server/9.0.0.0
- vendor/hp
- canonical/hp hp-ux
- canonical/ibm aix
- canonical/ibm i
- canonical/ibm z\/os
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/oracle
- canonical/oracle solaris
- version/ibm websphere application server/9.0
- version/ibm websphere application server/8.5
- version/ibm websphere application server/8.0
- version/ibm websphere application server/7.0