IBM Security Bulletin: IBM MessageSight/MessageGateway is affected by the following WebSphere Application Server vulnerability

IBM MessageSight/MessageGateway has addressed the following WebSphere Application Server vulnerability: CVE-2019-4046: IBM WebSphere Application Server is vulnerable to a denial of service, caused by improper handling of request headers

CVE(s): CVE-2019-4046

Affected product(s) and affected version(s):

Affected IBM MessageSight	Affected Versions
IBM MessageSight	1.2.0.0 – 1.2.0.3
IBM MessageSight	2.0.0.0 – 2.0.0.2
IBM MessageSight	5.0.0.0
IBM MessageGateway	5.0.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10884206
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/156242

The post IBM Security Bulletin: IBM MessageSight/MessageGateway is affected by the following WebSphere Application Server vulnerability appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2Rr2A2A