Lucene search

IBMB3DD634994C44081D1C1E793F50B30A00A5B9C6E6079CB8A5785D41351A289E8

HistoryApr 22, 2024 - 11:22 a.m.

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server traditional is vulnerable to a server-side request forgery (SSRF) vulnerability (CVE-2024-22329).

2024-04-2211:22:29

www.ibm.com

ibm

tivoli composite application manager

application diagnostics

websphere application server

ssrf vulnerability

cve-2024-22329

security bulletin

vulnerability

remediation

websphere

update

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

JSON

Summary

The security issue described in CVE-2024-22329 has been identified in the WebSphere Application Server traditional included as part of IBM Tivoli Composite Application Manager for Application Diagnostics

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
Tivoli Composite Application Manager for Application Diagnostics	7.1.0

Remediation/Fixes

Follow the WebSphere security bulletin, <https://www.ibm.com/support/pages/node/7148380> to update WebSphere Application Servers.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_composite_application_manager_for_wesbsphereMatch7.1.0

VendorProductVersionCPE
ibmtivoli_composite_application_manager_for_wesbsphere7.1.0cpe:2.3:a:ibm:tivoli_composite_application_manager_for_wesbsphere:7.1.0:*:*:*:*:*:*:*