Security Bulletin: Vulnerability in the IBM HTTP Server used by IBM WebSphere Application Server in IBM Cloud (CVE-2020-11985)

Summary

IBM HTTP Server is shipped as a component of IBM WebSphere Application Server in IBM Cloud. Information about a security vulnerabilitiy affecting IBM HTTP Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s)

|

Affected Supporting Product and Version

—|—
IBM WebSphere Application Server in IBM Cloud, all versions| IBM HTTP Server:

• 9.0.0.0
• 9.0.0.1
• 9.0.0.2

Remediation/Fixes

To patch an existing service instance, refer to the IBM WebSphere Application Server bulletin listed below:

• Vulnerability in the IBM HTTP Server used by WebSphere Application Server is fixed in 9.0.0.3
  Please see Updating your environment in the KnowlegeCenter for information on applying service.

Alternatively, delete the vulnerable service instance and create a new instance.

Workarounds and Mitigations

None