CVE-2023-50314

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274713.

Score

CVSS 3.1 7.5 High

Status

Analyzed - psirt@us.ibm.com

Published

2024-08-14

Last modified

2024-08-19

Weaknesses

CWE-295

Affected products

• Websphere Application Server (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/274713
• https://www.ibm.com/support/pages/node/7165502