{"id":"CVE-2022-43917","state":"PUBLISHED","title":"IBM WebSphere Application Server information disclosure","description":"\nIBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.\n\n","publishedAt":"2023-01-25T17:17:35.679Z","updatedAt":"2025-03-31T14:31:44.761Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM WebSphere Application Server"],"affected":[{"vendor":"IBM","product":"WebSphere Application Server","defaultStatus":"unaffected","versions":[{"version":"8.5, 9.0","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6857007","https://exchange.xforce.ibmcloud.com/vulnerabilities/241045"],"weaknesses":["CWE-327"],"ingestedAt":"2026-10-29T19:50:43.581Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/43xxx/CVE-2022-43917.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-43917","state":"PUBLISHED","datePublished":"2023-01-25T17:17:35.679Z","dateUpdated":"2025-03-31T14:31:44.761Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2022-10-26T15:46:22.846Z"},"containers":{"cna":{"title":"IBM WebSphere Application Server information disclosure","descriptions":[{"lang":"en","value":"\nIBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.\n\n"}],"affected":[{"vendor":"IBM","product":"WebSphere Application Server","defaultStatus":"unaffected","versions":[{"version":"8.5, 9.0","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6857007","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/241045","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-327","description":"CWE-327 Use of a Broken or Risky Cryptographic Algorithm","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-01-25T17:17:35.679Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6857007","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/241045","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T13:40:06.723Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-31T14:31:27.736031Z","id":"CVE-2022-43917","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-31T14:31:44.761Z"}}]}}}