Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q35j-c73r-4267

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL.

IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL.

EPSS

Процентиль: 46%
0.00234
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
около 11 лет назад

IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL.

EPSS

Процентиль: 46%
0.00234
Низкий

Дефекты

CWE-200