Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2019-10086)

Summary

WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletins(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s)

|

Affected Supporting Product and Version

—|—

WebSphere Service Registry and Repository V8.5

|

WebSphere Application Server V8.5.5

WebSphere Service Registry and Repository V8.0

|

WebSphere Application Server V8.0

Remediation/Fixes

Refer to the following security bulletin for vulnerability details and information about fixes:

• Security Bulletin: WebSphere Application Server is vulnerable to Apache Commons Beanutils (CVE-2019-10086)

Note the following Flash before upgrading WebSphere Application Server:

• WebSphere Service Registry and Repository: Read First before upgrading to WebSphere Application Server V8.5.5 Fix Pack 14

Workarounds and Mitigations

None