Weakness in IBM WebSphere Application Server Liberty Security
CVE-2022-22310
4.8MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 18 January 2022
Summary
IBM WebSphere Application Server Liberty versions 21.0.0.10 to 21.0.0.12 are affected by a vulnerability that allows remote attackers to exploit security weaknesses. This vulnerability can permit unauthorized access to sensitive information within JAX-WS applications hosted on the server. The issue arises from insufficient security measures implemented in the affected versions, potentially leading to data exposure and unauthorized data manipulation.
Affected Version(s)
WebSphere Application Server Liberty 21.0.0.10
WebSphere Application Server Liberty 21.0.0.12
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved