← Back

CVE-2022-38712

nvd nist
Published: Nov 3, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."

Affected (4)

Ibm
1 product
Websphere Application Server
Configuration A
4 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Ibm
Websphere Application Server
From 7.0.0.0 to 7.0.0.45
Websphere Application Server
From 8.0.0.0 to 8.0.0.15
Websphere Application Server
From 8.5.0.0 to 8.5.5.23
Websphere Application Server
From 9.0.0.0 to 9.0.5.14
Running on/withPlatform Versions
Hp
Hp Ux
All versions
Ibm
Aix
All versions
Ibm
I
All versions
Ibm
Z/os
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Oracle
Solaris
All versions

Related CWEs

CWE-290
Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (2)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.