Lucene search
HistoryJun 20, 2024 - 2:15 p.m.
CVE-2024-37532
ibm
websphere
application server
authentication
vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to identity spoofing by an authenticated user due to improper signature validation. IBM X-Force ID: 294721.
Related
vulnrichment
vulnrichment
CVE-2024-37532 IBM WebSphere Application Server identity spoofing
2024-06-20 13:22:16
ibm
ibm
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to identity spoofing (CVE-2024-37532)
2024-06-24 13:46:44
cve
cve
CVE-2024-37532
2024-06-20 14:15:10
cvelist
cvelist
CVE-2024-37532 IBM WebSphere Application Server identity spoofing
2024-06-20 13:22:16
nessus
nessus
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-37532