Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2020-4578 and CVE-2020-4643)

Summary

WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about security vulnerabilities affecting WebSphere Application Server have been published in security bulletins.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s)

|

Affected Supporting Product and Version(s)

—|—

WebSphere Service Registry and Repository V8.5

|

WebSphere Application Server V8.5.5

WebSphere Service Registry and Repository V8.0

|

WebSphere Application Server V8.0

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes:

• Security Bulletin: WebSphere Application Server Admin Console is vulnerable to cross-site scripting (CVE-2020-4578)
• Security Bulletin: WebSphere Application Server is vulnerable to an information exposure vulnerability (CVE-2020-4643)

Workarounds and Mitigations

None