IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.
References
Link | Resource |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/235069 | VDB Entry Vendor Advisory |
https://www.ibm.com/support/pages/node/6987779 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: ibm
Published: 2023-05-03T19:56:41.894Z
Updated: 2023-05-12T03:13:46.653654Z
Reserved: 2022-09-01T20:20:58.938Z
Link: CVE-2022-39161
JSON object: View
NVD Information
Status : Modified
Published: 2023-05-03T20:15:09.957
Modified: 2023-05-12T05:15:15.793
Link: CVE-2022-39161
JSON object: View
Redhat Information
No data.
CWE