CVE-2023-50314 MEDIUM

CVE-2023-50314: IBM WebSphere Application Server Libery information disclosure

Vendor Ibm
Product WebSphere Application Liberty
Weakness CWE-295
Published August 14, 2024
Last update August 19, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274713.

Key dates

02Disclosure timeline

August 14, 2024 CVE published
August 19, 2024 Record updated