Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2019-4441 and CVE-2019-4505)

Summary

WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about security vulnerabilities affecting WebSphere Application Server have been published in security bulletins.

Vulnerability Details

Refer to the following security bulletins for vulnerability details and information about fixes:

• Security Bulletin: Information disclosure vulnerability in WebSphere Application Server (CVE-2019-4441)
• Security Bulletin: Information disclosure in WebSphere Application Server ND (CVE-2019-4505)

Affected Products and Versions

WebSphere Service Registry and Repository V8.0 and V8.5 are affected.

Remediation/Fixes

Principal Product and Version(s)

|

Affected Supporting Product and Version

—|—

WebSphere Service Registry and Repository V8.5

|

WebSphere Application Server V8.5.5

WebSphere Service Registry and Repository V8.0

|

WebSphere Application Server V8.0

Note the following Flash before upgrading WebSphere Application Server:

WebSphere Service Registry and Repository: Read First before upgrading to WebSphere Application Server V8.5.5 Fix Pack 14

Workarounds and Mitigations

None