Lucene search

IBM178E87F2C8264F9A9597E46AC261D23BD425E8A9F52380CCC9B2A3E955DC9144

HistoryAug 19, 2024 - 7:51 p.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server CVE-2023-50315

2024-08-1919:51:54

www.ibm.com

ibm websphere

remote server

security bulletin

cve-2023-50315

information disclosure

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

37.8%

JSON

Summary

IBM WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM WebSphere Remote Server	9.1, 9.0, 8.5

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now. Refer to the following security bulletins for vulnerability details and information about fixes addressed by WebSphere Application Server which is shipped with IBM WebSphere Remote Server.

Principal Product and Version(s)

Affected Supporting Product and Version

Affected Supporting Product Security Bulletin

—|—|—

IBM WebSphere Remote Server 9.1, 9.0, 8.5

WebSphere Application 9.0, 8.5

IBM WebSphere Application Server is vulnerable to an information disclosure (CVE-2023-50315)

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmwebsphere_remote_serverMatch9.1

ibmwebsphere_remote_serverMatch9.0

ibmwebsphere_remote_serverMatch8.5

VendorProductVersionCPE
ibmwebsphere_remote_server9.1cpe:2.3:a:ibm:websphere_remote_server:9.1:*:*:*:*:*:*:*
ibmwebsphere_remote_server9.0cpe:2.3:a:ibm:websphere_remote_server:9.0:*:*:*:*:*:*:*
ibmwebsphere_remote_server8.5cpe:2.3:a:ibm:websphere_remote_server:8.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_remote_server	9.1	cpe:2.3:a:ibm:websphere_remote_server:9.1:::::::*
ibm	websphere_remote_server	9.0	cpe:2.3:a:ibm:websphere_remote_server:9.0:::::::*
ibm	websphere_remote_server	8.5	cpe:2.3:a:ibm:websphere_remote_server:8.5:::::::*

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

37.8%

JSON

Related for 178E87F2C8264F9A9597E46AC261D23BD425E8A9F52380CCC9B2A3E955DC9144