CVE-2021-39031

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 213875.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.214

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.2	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.1	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.2	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234