Lucene search

K
vulnrichmentIbmVULNRICHMENT:CVE-2024-22329
HistoryApr 17, 2024 - 1:21 a.m.

CVE-2024-22329 IBM WebSphere Application Server server-side request forgery

2024-04-1701:21:46
CWE-918
ibm
github.com
5
ibm
websphere
ssrf
vulnerability

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server_liberty:*:*:*:*:*:*:*:*"
    ],
    "vendor": "ibm",
    "product": "websphere_application_server_liberty",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3",
        "versionType": "semver",
        "lessThanOrEqual": "24.0.0.3"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*"
    ],
    "vendor": "ibm",
    "product": "websphere_application_server",
    "versions": [
      {
        "status": "affected",
        "version": "9.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*"
    ],
    "vendor": "ibm",
    "product": "websphere_application_server",
    "versions": [
      {
        "status": "affected",
        "version": "8.5"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-22329