CVE-2024-22329

Опубликовано: 17 апр. 2024

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/279951
Third Party Advisory
VDB Entry
https://www.ibm.com/support/pages/node/7148380
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/279951
Third Party Advisory
VDB Entry
https://www.ibm.com/support/pages/node/7148380
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:traditional:*:*:*

Версия от 8.5.0.0 (включая) до 8.5.5.26 (исключая)

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:traditional:*:*:*

Версия от 9.0.0.0 (включая) до 9.0.5.20 (исключая)

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*

Версия от 17.0.0.3 (включая) до 24.0.0.4 (исключая)

EPSS

Процентиль: 10%

0.00036

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

GHSA-7qc7-mcjv-jr2h