mickmick.net

IBM WebSphere Application Server Multiple Vulnerabilities

Release Date: 28 Feb 2022

RISK: Medium Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities were identified in IBM WebSphere Application Server. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure and denial of service condition on the targeted system.

---

Impact

• Information Disclosure
• Denial of Service

---

System / Technologies affected

• IBM WebSphere Application Server Liberty IBM SDK, Java Technology Edition Version prior to 8 SR7 FP5
• IBM WebSphere Application Server version 9
• IBM WebSphere Application Server version 8.5.0.0 through 8.5.5.21

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:
  https://www.ibm.com/support/pages/node/6559306

---

Vulnerability Identifier

• CVE-2021-35550
• CVE-2021-35603
• CVE-2022-21340

---

Source

• IBM
• AusCERT

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2022.0828
• https://www.ibm.com/support/pages/node/6559306