Security Bulletin: WebSphere Application Server shipped with IBM Cloud Pak for Applications is vulnerable to a server-side request forgery vulnerability (CVE-2020-4365)

Summary

WebSphere Application Server is shipped as a component of IBM Cloud Pak for Applications. Information about security vulnerabilities affecting WebSphere Application Server

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

WebSphere Application Server:

• 8.5

Remediation/Fixes

Please consult the following security bulletin for vulnerability details and information about fixes

• WebSphere Application Server is vulnerable to a server-side request forgery vulnerability (CVE-2020-4365)

Workarounds and Mitigations

None