PH68462,PH67153,PH67414:IBM HTTP Server is affected by multiple vulnerabilities

View the Security Bulletin for PH67153

View the Security Bulletin for PH67414

View the Security Bulletin for PH68462

• CVE-2024-43394
  • Vulnerable Configurations: IHS on Windows with RewriteCond or Apache Expression Parser expressions that are tricked into looking up remote UNC file paths through use of unary file operators (-d, -f)
• CVE-2024-42516
  • Vulnerable Configurations: mod_proxy loaded and backend application that can be tricked into setting an attacker controlled Content-Type header
• CVE-2024-43204
  • Vulnerable Configurations: mod_proxy loaded and `Header` directive in the IHS configuration that sets Content-Type to values computed from user controlled variables/expressions

• CVE-2025-54090
  • Vulnerable Configurations: `RewriteCond` directive with first argument of the literal "expr" and the condition is used for some security purpose.  Only applicable to 9.0 with IFPH67153 installed.

• CVE-2025-58098
  • Affected Configurations: mod_include and mod_cgid (but not mod_cgi) modules loaded
• CVE-2025-59775
  • Affected Configurations: Windows with both of the following non-default directives:  "AllowEncodedSlashes ON" and "MergeSlashes OFF" (extremely uncommon)
• CVE-2025-65082
  • Affected Configurations: mod_cgi or mod_cgid loaded and htaccess enabled with AllowOverride other than "none" above CGI root.  
• CVE-2025-66200
  • Affected Configurations: mod_userdir and mod_suexec both loaded AND $IHS_HOME/bin/suexec added by administrator (extremely uncommon)
• CVE-2025-59375
  • mod_dav loaded (extremely uncommon)
    
     

The fixes are targeted for inclusion in 8.5.5.29 and 9.0.5.27.
For more information, see Recommended Updates for WebSphere Application Server:
https://www.ibm.com/support/pages/node/715553