CVE-2023-50314

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274713.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*

History

23 Aug 2024, 19:20

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*
Summary
  • (es) IBM WebSphere Application Server Liberty 17.0.0.3 a 24.0.0.8 podría permitir que un atacante con acceso a la red realice ataques de suplantación de identidad. Un atacante podría aprovechar esta vulnerabilidad utilizando un certificado emitido por una autoridad confiable para obtener información confidencial. ID de IBM X-Force: 274713.
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : 7.5
CWE NVD-CWE-Other
First Time Ibm
Ibm websphere Application Server
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/274713 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/274713 - Vendor Advisory
References () https://www.ibm.com/support/pages/node/7165502 - () https://www.ibm.com/support/pages/node/7165502 - Vendor Advisory

14 Aug 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-14 18:15

Updated : 2024-08-23 19:20


NVD link : CVE-2023-50314

Mitre link : CVE-2023-50314

CVE.ORG link : CVE-2023-50314


JSON object : View

Products Affected

ibm

  • websphere_application_server
CWE
NVD-CWE-Other CWE-295

Improper Certificate Validation