LDAP Injection Vulnerability in IBM WebSphere Application Server - Liberty
CVE-2021-39031

7.5HIGH

Key Information:

Vendor

IBM
Status
Websphere Application Server Liberty
Vendor
CVE Published:
25 January 2022

What is CVE-2021-39031?

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 22.0.0.1 are susceptible to a vulnerability that allows remote authenticated attackers to perform LDAP injection via specially crafted requests. This could enable unauthorized access to sensitive resources, compromising the application’s security. Organizations using these versions should implement appropriate measures to mitigate the risks associated with this vulnerability to prevent potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WebSphere Application Server Liberty 17.0.0.3

WebSphere Application Server Liberty 22.0.0.1

References

https://www.ibm.com/support/pages/node/6550488
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/213875
vdb-entryx_refsource_XF

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.