Description
IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
Low
Availability
None
Affected products
- ibm / websphere_application_server17.0.0.3 – 26.0.0.8
- ibm / websphere_application_server___liberty17.0.0.3 – 17.0.0.3
- ibm / websphere_application_server___liberty26.0.0.7 – 26.0.0.7
References
Updated 10m ago · 8 sources