Security Bulletin: A security vulnerability has been identified in embedded IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2015-2017)

Summary

Embedded Websphere Application Server (eWAS) is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting eWAS has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Security Bulletin: HTTP response splitting attack in WebSphere Application Server (CVE-2015-2017) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
WebGUI 7.3.0 GA and FP| embedded Websphere Application Server 6.1
WebGUI 7.3.1 GA and FP| embedded Websphere Application Server 7.0
WebGUI 7.4.0 GA and FP| embedded Websphere Application Server 7.0