IBM Security Bulletin: Multiple Security Vulnerabilities in IBM HTTP Server (CVE-2017-7679, CVE-2017-7668, CVE-2017-3167)

There are multiple vulnerabilities in the IBM HTTP Server used by WebSphere Application Server.

CVE(s): CVE-2017-7679, CVE-2017-7668, CVE-2017-3167

Affected product(s) and affected version(s):

These vulnerabilities affect the following versions and releases of IBM HTTP Server (powered by Apache) component in all editions of WebSphere Application Server and bundling products.

  • Version 9.0
  • Version 8.5
  • Version 8.0
  • Version 7.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2uct3VK
X-Force Database: http://ift.tt/2uD0B26
X-Force Database: http://ift.tt/2ucpuPg
X-Force Database: http://ift.tt/2uCTW8a

The post IBM Security Bulletin: Multiple Security Vulnerabilities in IBM HTTP Server (CVE-2017-7679, CVE-2017-7668, CVE-2017-3167) appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2uckWJ1