CVE-2024-22329

Description

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.036

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in IBM WebSphere 9.0.5.2	Windows
Multiple vulnerabilities are fixed in IBM WebSphere 8.5.5.2	Windows
Vulnerabilities CVE-2024-22329 are fixed in IBM WebSphere 24.0.0.4	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.1	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 9.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 20.0.0.2	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.2.5	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.3.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 11.0.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0.0.3	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 21.0.3.1	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 22.0.2	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.2.0.2	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Application Dependency Discovery Manager 7.3.0.11	Windows
Multiple Vulnerabilities are affected in IBM Planning Analytics Local 2.0	Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.2	Windows
Multiple Vulnerabilities are affected in IBM Planning Analytics Local 2.1	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.1	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.2	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 23.0.2	Windows
Multiple Vulnerabilities are affected in IBM MQ 9.3	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234