Security Bulletin: Vulnerabilities identified in WebSphere Service Registry and Repository and WebSphere Application Server shipped with IBM SOA Policy Gateway Pattern for AIX Server and Red Hat Enterprise Linux Server (CVE-2015-7450)

Summary

WebSphere Service Registry and Repository and WebSphere Application Server are shipped as a component of IBM SOA Policy Gateway Pattern for AIX Server 2.5 and IBM SOA Policy Gateway Pattern for Red Hat Enterprise Linux Server. Information about a security vulnerability affecting WebSphere Service Registry and Repository and WebSphere Application Server have been published in security bulletins.

Vulnerability Details

Please consult these security bulletins:

Security Bulletin: Vulnerability in Apache Commons affects IBM WebSphere Service Registry and Repository (CVE-2015-7450)

Security Bulletin: Vulnerability in Apache Commons affects IBM WebSphere Application Server (CVE-2015-7450)

for vulnerability details and information about fixes.

Affected Products and Versions

IBM SOA Policy Gateway Pattern for AIX Server 2.5
IBM SOA Policy Gateway Pattern for Red Hat Enterprise Linux Server 2.5
IBM SOA Policy Gateway Pattern for Red Hat Enterprise Linux Server 2.0

All affected by WebSphere Service Registry and Repository V8.0 and WebSphere Application Server V8.0

Remediation/Fixes

None

Workarounds and Mitigations

None