Security Bulletin: Vulnerabilities identified in IBM HTTP Server shipped with IBM WebSphere Service Registry and Repository (CVE-2015-3183 CVE-2015-1283)

Summary

IBM HTTP Server is shipped as a component of IBM WebSphere Service Registry and Repository. Information about security vulnerabilities affecting IBM HTTP Server have been published in security bulletins.

Vulnerability Details

Please consult the security bulletins:

Security Bulletin: HTTP Request smuggling vulnerability may affect IBM HTTP Server (CVE-2015-3183)

Security Bulletin: Denial of service may affect IBM HTTP Server (CVE-2015-1283)

for vulnerability details and information about fixes.

Affected Products and Versions

IBM WebSphere Service Registry and Repository V8.5 and V8.0
are affected by IBM HTTP Server V8.0.

IBM WebSphere Service Registry and Repository V7.5 and V7.0
are affected by IBM HTTP Server V7.0.

Remediation/Fixes

None

Workarounds and Mitigations

None