CVE-2022-22310

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/217224
• https://www.ibm.com/support/pages/node/6541530 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6541530

Frequently Asked Questions

• What is CVE-2022-22310?

  CVE-2022-22310 is a vulnerability in IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 that could provide weaker than expected security, allowing a remote attacker to obtain sensitive information and gain unauthorized access to JAX-WS applications.

• What is the severity of CVE-2022-22310?

  The severity of CVE-2022-22310 is medium with a severity value of 6.5.

• How does CVE-2022-22310 affect IBM WebSphere Application Server Liberty?

  CVE-2022-22310 affects IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 by providing weaker than expected security, which can lead to unauthorized access and the exposure of sensitive information in JAX-WS applications.

• How can a remote attacker exploit CVE-2022-22310?

  A remote attacker can exploit CVE-2022-22310 by taking advantage of the weaker than expected security in IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12, allowing them to obtain sensitive information and gain unauthorized access to JAX-WS applications.

• Is there any additional information available about CVE-2022-22310?

  Yes, you can find more information about CVE-2022-22310 at the following references: [IBM X-Force ID: 217224](https://exchange.xforce.ibmcloud.com/vulnerabilities/217224) and [IBM support page](https://www.ibm.com/support/pages/node/6541530).