Security Bulletin: Multiple security vulnerabilities has been identified in Websphere Application Server shipped with Tivoli Integrated Portal (CVE-2015-7450) (CVE-2015-2017)

Summary

Embedded version of Websphere Application Server is shipped as a component of Tivoli Integrated Portal. Information about the security vulnerabilities affecting Embedded version of Websphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the below security bulletins

Security Bulletin: Vulnerability in Apache Commons affects IBM WebSphere Application Server (CVE-2015-7450)

Security Bulletin: HTTP response splitting attack in WebSphere Application Server (CVE-2015-2017)

for vulnerability details and information about fixes

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
Tivoli Integrated Portal version 2.1
Tivoli Integrated Portal version 2.2
Tivoli Integrated Portal version 1.1.1.x
(wherever applicable)| embedded Websphere Application Server version 7.0
embedded Websphere Application Server version 7.0
embedded Websphere Application Server version 6.1
(wherever applicable)

Remediation/Fixes

None

Workarounds and Mitigations

None