IBM Security Bulletin: Security Bulletin: Information disclosure in IBM HTTP Server (CVE-2018-1388)

There is a potential information disclosure in IBM HTTP Server used by WebSphere Application Server.

CVE(s): CVE-2018-1388

Affected product(s) and affected version(s):

This vulnerability affects the following versions and releases of IBM HTTP Server (powered by Apache) component in all editions of WebSphere Application Server and bundling products.

• Version 7.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22014196
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138212

The post IBM Security Bulletin: Security Bulletin: Information disclosure in IBM HTTP Server (CVE-2018-1388) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2FD9LxK