WCH 11.1 M020 and Apache upgrade

[Alberto]

I am using Windchill PDMLink Release 11.1 and Datecode with CPS M020-CPS13

Hello,
we have WCH 11.1 M020 CPS13 and we must solve the security hole regarding Apache HTTP server module.
Do you have suggest to me?
With the lasp CPS updgade for M020, Ca i solve the issue?

Thanks

[avillanueva]

With an out of support Windchill version (ended Jan 2023) (PTC Support Calendar) the right solution is to plan an upgrade to the latest version of Windchill. You might need a two step upgrade to get there. Other than that, my suggestion is that you install your own Apache webserver and copy the configurations over to it. This means you stop using the Windchill supplied Apache instance and use your own which you can patch and upgrade as needed. However, this also means any PTC supplied scripts for ant and reconfigurations will not work without modifications. 

[Alberto]

Hello.
for the moment we cannot upgrade our Windchill version because it has some connectors with other external application.
This is plan for the middle of next year after all necessary test.
In this moment we must solve this security issue to be complaint with the new normative NSI2.
Thanks

[avillanueva]

In this case, install a current version of Apache. You should be able to copy over the conf files to the similar areas. Change your startup scripts to run this new version and do not use the PTC supplied Apache server. That should do the trick.

[Alberto]

I found this Article - CS386653 - Potential Impact of Apache HTTP Server (2.4 to 2.4.54) security vulnerability (CVE-2022-36760) in Windchill PDMLink & FlexPLM (ptc.com) and for the moment I prefe to apply only the patch in our WCH version.

Thx for your reply