CVE-2022-22393

Description

IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTPS ports which are accessible by the application server. IBM X-Force ID: 222078.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.19

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 9.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 20.0.0.2	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 18.0.0.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0.0.3	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 21.0.3	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.2	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234