7.5

CVE-2022-43917

IBM WebSphere Application Server information disclosure

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server Version 8.5 SwEdition traditional
   Hp ≫ Hp-ux Version -
   Ibm ≫ Aix Version -
   Ibm ≫ I Version -
   Ibm ≫ Z/os Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
   Oracle ≫ Solaris Version - HwPlatform -
Ibm ≫ Websphere Application Server Version 9.0 SwEdition traditional
   Hp ≫ Hp-ux Version -
   Ibm ≫ Aix Version -
   Ibm ≫ I Version -
   Ibm ≫ Z/os Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
   Oracle ≫ Solaris Version - HwPlatform -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.406
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
IBM 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://exchange.xforce.ibmcloud.com/vulnerabilities/241045
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/6857007
Patch
Vendor Advisory