Security Bulletin: Vulnerability identified in IBM WebSphere Application Server shipped with IBM WebSphere Service Registry and Repository (CVE-2015-2017)

Summary

IBM WebSphere Application Server is shipped as a component of IBM WebSphere Service Registry and Repository. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin:

Security Bulletin: HTTP response splitting attack in WebSphere Application Server (CVE-2015-2017)

for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

|

Affected Supporting Product and Version

—|—
WebSphere Service Registry and Repository V8.5| WebSphere Application Server V8.5.5
WebSphere Service Registry and Repository V8.0| WebSphere Application Server V8.0
WebSphere Service Registry and Repository V7.5| WebSphere Application Server V7.0
WebSphere Service Registry and Repository V7.0| WebSphere Application Server V7.0
WebSphere Service Registry and Repository V6.3| WebSphere Application Server V7.0 OR WebSphere Application Server V6.1

Remediation/Fixes

None

Workarounds and Mitigations

None