CVE-2023-50315 MEDIUM

CVE-2023-50315: IBM WebSphere Application Server information disclosure

Vendor Ibm
Product WebSphere Application Server
Weakness CWE-295
Published August 14, 2024
Last update August 14, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274714.

Key dates

02Disclosure timeline

August 14, 2024 CVE published
August 14, 2024 Record updated