CVE-2023-50315

MEDIUM

5.3

Description

IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274714.

CVE Details

CVSS v3.1 Score5.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorADJACENT_NETWORK

ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

Published8/14/2024

Last Modified9/11/2024

Sourcenvd

Honeypot Sightings0

Affected Products

ibm:websphere_application_server

Weaknesses (CWE)

CWE-295

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/274714(psirt@us.ibm.com)

https://www.ibm.com/support/pages/node/7165511(psirt@us.ibm.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.