Description
IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084.
CVSS breakdown
CVSS 3.0
Availability
Low
Integrity
Low
Attack Vector
Network
Attack Complexity
High
Scope
Unchanged
Confidentiality
Low
Privileges Required
Low
User Interaction
None
RL
O
E
Unchanged
RC
Changed
Affected products
- ibm / websphere_application_server___liberty20.0.0.4 – 20.0.0.4
- ibm / websphere_application_server___liberty19.0.0.5 – 19.0.0.5