Security Bulletin: HTTP response splitting vulnerability in IBM WebSphere Application Server affects IBM Control Center (CVE-2015-2017)

Summary

IBM WebSphere Application Server is shipped as a component of IBM Control Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Security Bulletin: HTTP response splitting attack in WebSphere Application Server (CVE-2015-2017) for vulnerability details.

Affected Products and Versions

IBM Control Center 6.0.0.0 through 6.0.0.1 iFix03
IBM Sterling Control Center 5.4.2 through 5.4.2.1 iFix06

Remediation/Fixes

Product

| VRMF|Fix|How to acquire fix
—|—|—|—
IBM Control Center| 6.0.0.1| iFix04| Fix Central - 6.0.0.1
Sterling Control Center| 5.4.2.1| iFix07| Fix Central - 5.4.2.1

Workarounds and Mitigations

None