PH46816:IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to HTTP header injection (CVE-2022-34165 CVSS 5.4)

Download

Downloadable File

File link	File size	File description

Abstract

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to HTTP header injection (CVE-2022-34165 CVSS 5.4)

Download Description

View the Security Bulletin

PH46816 resolves the following problem:

ERROR DESCRIPTION:
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to HTTP header injection (CVE-2022-34165 CVSS 5.4)

PROBLEM SUMMARY:
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to HTTP header injection (CVE-2022-34165 CVSS 5.4)

PROBLEM CONCLUSION:
Confidential for CVE-2022-34165 CVSS 5.4.

The fix for this APAR is currently targeted for inclusion in fix packs 8.5.5.23, 9.0.5.14 and Liberty 22.0.0.10.

For more information, see 'Recommended Updates for WebSphere Application Server': http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Prerequisites

None

Installation Instructions

Review the readme.txt for detailed installation instructions.

URL	SIZE(Bytes)
V80 readme file	2303
V70 readme file	4987
V85 readme file	2331
V90 readme file	2245
22.0.0.9 readme file	2282
22.0.0.9 Archive readme file	2575
22.0.0.6 Archive readme file	2575

Download Package

DOWNLOAD	RELEASE DATE	SIZE(Bytes)	URL Fix Central (FC) help
7.0.0.45-WS-WAS-IFPH46816	01 September 2022	17510	FC
8.0.0.15-WS-WAS-IFPH46816	01 September 2022	268935	FC
8.5.5.21-WS-WAS-IFPH46816	01 September 2022	269586	FC
8.5.5.22-WS-WAS-IFPH46816	01 September 2022	269861	FC
9.0.5.12-WS-WAS-IFPH46816	01 September 2022	269943	FC
9.0.5.13-WS-WAS-IFPH46816	01 September 2022	269954	FC
22.0.0.6-WS-WLP-IFPH46816	01 September 2022	6653609	FC
22.0.0.9-WS-WLP-IFPH46816	01 September 2022	6658734	FC
22006-wlp-archive-IFPH46816	01 September 2022	6591386	FC
22009-wlp-archive-IFPH46816	01 September 2022	6597004	FC

Problems Solved

PH46816

Technical Support

Contact IBM Support at https://www.ibm.com/mysupport/ or 1-800-IBM-SERV (US only).

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Component":"General","Platform":[{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"},{"code":"PF017","label":"Mac OS"},{"code":"PF002","label":"AIX"}],"Version":"22.0.0.6;22.0.0.9;7.0.0.45;8.0.0.15;8.5.5.21;8.5.5.22;9.0.5.12;9.0.5.13","Edition":"Base","Line of Business":{"code":"LOB45","label":"Automation"}}]

Problems (APARS) fixed
PH46816

Was this topic helpful?

Document Information

Modified date:
07 September 2022

UID

ibm16617049

Tips