Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2022-35282)

2022-10-0604:10:57

www.ibm.com

ibm case manager

websphere application server

security bulletin

vulnerability

server-side request forgery

cve-2022-35282

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

17.7%

JSON

Summary

IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Case Manager	5.3CD

Remediation/Fixes

Please consult the security bulletin Security Bulletin: IBM WebSphere Application Server is vulnerable to Server-Side Request Forgery (CVE-2022-35282) for vulnerability details and information about fixes.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmcase_managerMatch5.1.1.

ibmcase_managerMatch5.2.0

ibmcase_managerMatch5.2.1

ibmcase_managerMatch5.3.

VendorProductVersionCPE
ibmcase_manager5.1.1.cpe:2.3:a:ibm:case_manager:5.1.1.:*:*:*:*:*:*:*
ibmcase_manager5.2.0cpe:2.3:a:ibm:case_manager:5.2.0:*:*:*:*:*:*:*
ibmcase_manager5.2.1cpe:2.3:a:ibm:case_manager:5.2.1:*:*:*:*:*:*:*
ibmcase_manager5.3.cpe:2.3:a:ibm:case_manager:5.3.:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	case_manager	5.1.1.	cpe:2.3:a:ibm:case_manager:5.1.1.:::::::*
ibm	case_manager	5.2.0	cpe:2.3:a:ibm:case_manager:5.2.0:::::::*
ibm	case_manager	5.2.1	cpe:2.3:a:ibm:case_manager:5.2.1:::::::*
ibm	case_manager	5.3.	cpe:2.3:a:ibm:case_manager:5.3.:::::::*