CVE-2022-43917

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-43917
IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/241045 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6857007 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/241045 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6857007 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:traditional:*:*:*
cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:traditional:*:*:*
OR cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:z\/os:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*
History

21 Nov 2024, 07:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 5.9
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/241045 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/241045 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/6857007 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/6857007 - Patch, Vendor Advisory

07 Nov 2023, 03:54

Type Values Removed Values Added
Summary IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045. IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.
Information

Published : 2023-01-26 21:17

Updated : 2024-11-21 07:27

NVD link : CVE-2022-43917

Mitre link : CVE-2022-43917

CVE.ORG link : CVE-2022-43917

JSON object : View

Products Affected

ibm

  • i
  • aix
  • z\/os
  • websphere_application_server

oracle

  • solaris

microsoft

  • windows

hp

  • hp-ux

linux

  • linux_kernel
CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm