CVE-2023-46158

Опубликовано: 25 окт. 2023

Источник: nvd

CVSS3: 4.9

CVSS3: 9.8

EPSS Низкий

Описание

IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/268775
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7058356
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/268775
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7058356
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:websphere_application_server_liberty:*:*:*:*:*:*:*:*

Версия от 23.0.0.9 (включая) до 23.0.0.11 (исключая)

EPSS

Процентиль: 12%

0.00041

Низкий

4.9 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-613

Связанные уязвимости

GHSA-3942-82qw-f9qh

CVSS3: 4.9

github

больше 2 лет назад

IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775.

EPSS

Процентиль: 12%

0.00041

Низкий

4.9 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-613