Security Bulletin: Vulnerability identified in IBM WebSphere Application Server shipped with IBM WebSphere Service Registry and Repository (CVE-2022-35282)

2022-09-2915:01:52

www.ibm.com

ibm websphere

security bulletin

vulnerability

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

17.7%

JSON

Summary

IBM WebSphere Application Server is shipped as a component of IBM WebSphere Service Registry and Repository. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s)	Affected Supporting Product and Version(s)
WebSphere Service Registry and Repository V8.5	WebSphere Application Server V8.5.5
WebSphere Service Registry and Repository V8.0	WebSphere Application Server V8.0

Remediation/Fixes

Please consult the security bulletin:

Security Bulletin: IBM WebSphere Application Server is vulnerable to Server-Side Request Forgery (CVE-2022-35282)

for vulnerability details and information about fixes.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmwebsphere_service_registry_and_repositoryMatch8.0

ibmwebsphere_service_registry_and_repositoryMatch8.5

VendorProductVersionCPE
ibmwebsphere_service_registry_and_repository8.0cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.0:*:*:*:*:*:*:*
ibmwebsphere_service_registry_and_repository8.5cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_service_registry_and_repository	8.0	cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.0:::::::*
ibm	websphere_service_registry_and_repository	8.5	cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.5:::::::*