CVE-2023-50315 — Improper Certificate Validation in IBM Websphere Application Server

CWE-295 — Improper Certificate Validation3 documents3 sources
Severity
5.9MEDIUMNVD
CNA5.3
EPSS
0.1%
top 64.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Application Server
Timeline
PublishedAug 14

Description

IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274714.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/websphere_application_server8.5.0.0, 9.0.0.0+1

🔴Vulnerability Details

2
GHSA
GHSA-g788-m4v3-47c7: IBM WebSphere Application Server 8↗2024-08-14
▶
CVEList
IBM WebSphere Application Server information disclosure↗2024-08-14
▶
CVE-2023-50315 — Improper Certificate Validation in IBM | cvebase