CVE-2022-22475

Description

IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.086

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-22475 are fixed in IBM WebSphere 22.0.0.6	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 9.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 20.0.0.2	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.2	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 18.0.0.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0.0.3	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 21.0.3	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Application Dependency Discovery Manager 7.3.0.9	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.2	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.1	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.2	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234