IBM HTTP Server is vulnerable to HTTP request splitting due to the included Apache HTTP Server (CVE-2023-25690)

Authors: Created by IBM

IBM HTTP Server used by IBM WebSphere Application Server is vulnerable to HTTP request splitting when using mod_proxy or the Web Server Plug-in due to the included Apache HTTP Server.This has been addressed in the remediation section. CVEID: CVE-2023-25690 ^[1]
DESCRIPTION: Apache HTTP Server is vulnerable to HTTP request splitting attacks, caused by an error when mod_proxy is enabled along with some form of RewriteRule or...

Just published by IBM: Read more