IBME37FDB0011127B58D7955350940B807B2677FED28F3CAA4CBC6075C5FD306593Security Bulletin: A security vulnerability has been identified in WebSphere Application Server traditional shipped with IBM Intelligent Operations Center (CVE-2022-38712)
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
36.8%
Summary
IBM WebSphere Application Server traditional is shipped with IBM Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| Intelligent Operations Center (IOC) | 1.5.0, 1.6.0, 1.6.0.1, 1.6.0.2, 1.6.0.3 |
| IBM Intelligent Operations Center for Emergency Management (Linux) | 1.6.0 |
Remediation/Fixes
Download the correct version of the fix from the following link: Security Bulletin:IBM WebSphere Application Server is vulnerable to SOAPAction spoofing (CVE-2022-38712). Installation instructions for the fix are included in the readme document that is in the fix package.
Workarounds and Mitigations
None
Affected configurations
Related
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
36.8%