Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-22329

IBM WebSphere Application Server server-side request forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM WebSphere Application Server

Default version status: unaffected

  • 8.5, 9.0affected

IBM WebSphere Application Server Liberty

Default version status: unaffected

  • 17.0.0.3 to ≤ 24.0.0.3affected

References