ID CVE-2022-22393
Summary IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTPS ports which are accessible by the application server. IBM X-Force ID: 222078.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:websphere_application_server:17.0.0.3:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:17.0.0.3:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:17.0.0.4:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:17.0.0.4:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:18.0.0.1:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:18.0.0.1:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:18.0.0.2:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:18.0.0.2:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:18.0.0.3:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:18.0.0.3:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:18.0.0.4:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:18.0.0.4:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.1:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.1:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.2:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.2:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.3:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.3:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.4:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.4:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.5:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.5:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.6:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.6:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.7:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.7:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.8:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.8:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.9:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.9:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.10:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.10:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.11:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.11:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:19.0.0.12:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:19.0.0.12:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.1:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.1:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.2:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.2:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.3:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.3:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.4:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.4:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.5:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.5:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.6:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.6:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.7:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.7:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.8:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.8:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.9:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.9:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.10:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.10:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.11:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.11:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:20.0.0.12:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:20.0.0.12:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:21.0.0.1:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:21.0.0.1:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:21.0.0.2:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:21.0.0.2:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:21.0.0.3:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:21.0.0.3:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:21.0.0.4:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:21.0.0.4:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:21.0.0.5:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:21.0.0.5:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:21.0.0.10:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:21.0.0.10:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:21.0.0.12:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:21.0.0.12:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:22.0.0.1:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:22.0.0.1:*:*:*:liberty:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:22.0.0.5:*:*:*:liberty:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:22.0.0.5:*:*:*:liberty:*:*:*
CVSS
Base: 3.5 (as of 23-05-2022 - 19:08)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:M/Au:S/C:P/I:N/A:N
Last major update 23-05-2022 - 19:08
Published 13-05-2022 - 17:15
Last modified 23-05-2022 - 19:08
Back to Top