CVE-2024-22353

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22353
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/280400 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7145365 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*
History

16 May 2024, 00:15

Type Values Removed Values Added
Summary (en) IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400. (en) IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400.
CWE CWE-400 CWE-770

02 Apr 2024, 17:56

Type Values Removed Values Added
Summary
  • (es) IBM WebSphere Application Server Liberty 17.0.0.3 a 24.0.0.3 es vulnerable a una denegación de servicio provocada por el envío de una solicitud especialmente manipulada. Un atacante remoto podría aprovechar esta vulnerabilidad para hacer que el servidor consuma recursos de memoria. ID de IBM X-Force: 280400.
CVSS v2 : unknown
v3 : 5.9 		v2 : unknown
v3 : 7.5
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/280400 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/280400 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/7145365 - () https://www.ibm.com/support/pages/node/7145365 - Vendor Advisory
First Time Ibm websphere Application Server
Ibm
CPE cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*

31 Mar 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-31 12:15

Updated : 2024-05-16 00:15

NVD link : CVE-2024-22353

Mitre link : CVE-2024-22353

CVE.ORG link : CVE-2024-22353

JSON object : View

Products Affected

ibm

  • websphere_application_server
CWE
CWE-770

Allocation of Resources Without Limits or Throttling