CVE-2022-22475

published 2022-05-17

CVE-2022-22475: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I H A N

IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	open_liberty	17.0.0.3 – 22.0.0.5	—
ibm	websphere_application_server	17.0.0.3 – 22.0.0.5	—
ibm	websphere_application_server_liberty	—	—
ibm	websphere_application_server_liberty	—	—

CWE-20