HTTP/HTTPS Port Status Exposure in IBM WebSphere Application Server Liberty
CVE-2022-22393

3.1LOW

Key Information:

Vendor
IBM
Status
Websphere Application Server Liberty
Vendor
CVE Published:
13 May 2022

Summary

The IBM WebSphere Application Server Liberty, when configured with the adminCenter-1.0 feature, exposes a vulnerability that potentially allows authenticated users to request and obtain the status of accessible HTTP/HTTPS ports. This exposure could facilitate unauthorized insights into the server's network services, leading to potential security risks.

Affected Version(s)

WebSphere Application Server Liberty 17.0.0.3

WebSphere Application Server Liberty 22.0.0.5

References

https://www.ibm.com/support/pages/node/6585704
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/222078
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.