CVE-2022-22476

🗓️ 08 Jul 2022 17:45:25Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 121 Views

IBM WebSphere App Server Liberty 17.0.0.3-22.0.0.7 & Open Liberty, identity spoofing vulnerabilit

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Liberty Profile affects IBM InfoSphere Identity Insight (CVE-2022-22475 and CVE-2022-22476)	9 Aug 202219:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty vulnerable to identity spoofing by an authenticated user using a specially crafted request.	27 Sep 202213:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to identity spoofing due to IBM WebSphere Application Server Liberty (CVE-2022-22476)	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty may affect IBM Spectrum Protect Operations Center and Client Management Service (CVE-2022-22476))	17 Sep 202203:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Advanced Communications is vulnerable to identity spoofing due to IBM WebSphere Application Server Liberty (CVE-2022-22476)	20 Feb 202309:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related IBM WebSphere Application Server Liberty and FasterXML jackson-databind	26 Mar 202502:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by an identity spoofing issue in IBM WebSphere Application Server Liberty (CVE-2022-22476)	27 Oct 202210:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to identity spoofing with authenticated user and ability to bypass security restrictions due to Eclipse Paho Java client (CVE-2019-11777, CVE-2022-22476)	12 Sep 202223:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM WebSphere Liberty affects IBM InfoSphere Global Name Management (CVE-2022-22475, CVE-2022-22476)	7 Feb 202323:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Virtualization Engine TS7700 is vulnerable to multiple threats due to use of IBM WebSphere Application Server Liberty (CVE-2022-34165, CVE-2022-22476)	7 Dec 202218:58	–	ibm

NVD

Vulners

Node

ibm open_libertyRange17.0.0.3–22.0.0.8

ibm websphere_application_serverRange17.0.0.3–22.0.0.8liberty

[
  {
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3"
      },
      {
        "status": "affected",
        "version": "22.0.0.7"
      }
    ]
  }
]