IBM WebSphere Application Server session fixation
CVE-2023-46158

4.9MEDIUM

Key Information:

Vendor
IBM
Status
Websphere Application Server Liberty
Vendor
CVE Published:
25 October 2023

Summary

IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775.

Affected Version(s)

WebSphere Application Server Liberty 23.0.0.9, 23.0.0.10

References

https://www.ibm.com/support/pages/node/7058356
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/268775
vdb-entry

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.