IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote attacker to obtain sensitive information. IBM X-Force ID: 144270.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_application_server | 9.0 | 9.0.x |
| ibm / websphere_application_server | 7.0 | 7.0.x |
| ibm / websphere_application_server | 8.0 | 8.0.x |
| ibm / websphere_application_server | 8.5 | 8.5.x |