mickmick.net

IBM WebSphere Application Server Multiple Vulnerabilities

Release Date: 17 Nov 2022

RISK: Medium Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities were identified in IBM WebSphere Application Server. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and data manipulation on the targeted system.

---

Impact

• Denial of Service
• Data Manipulation

---

System / Technologies affected

• IBM WebSphere Application Server 9.0
• IBM WebSphere Application Server 8.5
• IBM WebSphere Application Server Liberty Continuous delivery

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.ibm.com/support/pages/node/6839565

---

Vulnerability Identifier

• CVE-2022-21624
• CVE-2022-21626

---

Source

• IBM
• AusCERT

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2022.5962
• https://www.ibm.com/support/pages/node/6839565