CVE-2022-22476

Description

IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.089

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-22476,CVE-2019-11777 are fixed in IBM WebSphere 22.0.0.8	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 9.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 20.0.0.2	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 18.0.0.2	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0.0.3	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 21.0.3	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Application Dependency Discovery Manager 7.3.0.9	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.2	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.1	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.2	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.3	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234