CVE-2021-39031
First published: Mon Jan 24 2022(Updated: )
IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 213875.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Websphere Application Server | >=17.0.0.3<=22.0.0.1 | |
| IBM WebSphere Application Server Liberty | <=17.0.0.3 - 22.0.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-39031?
CVE-2021-39031 is a vulnerability in IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 that could allow a remote authenticated attacker to conduct an LDAP injection.
What is the severity of CVE-2021-39031?
CVE-2021-39031 has a severity rating of 8.8 (high).
How can an attacker exploit CVE-2021-39031?
An attacker can exploit CVE-2021-39031 by using a specially crafted request to conduct an LDAP injection, potentially granting permission to unauthorized resources.
Is there a fix available for CVE-2021-39031?
Yes, IBM has provided fixes for this vulnerability. Please refer to the IBM support pages for more information on how to apply the fixes.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-39031?
CVE-2021-39031 is associated with CWE-74, which is the CWE ID for Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection').
- collector/nvd-index
- agent/type
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm websphere application server
- version/ibm websphere application server/17.0.0.3
- version/ibm websphere application server/22.0.0.1
- canonical/ibm websphere application server liberty
- version/ibm websphere application server liberty/17.0.0.3 - 22.0.0.1