CVE-2022-22476: High severity ibm liberty vulnerability

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-22476.

Q: What is the severity of CVE-2022-22476?

The severity of CVE-2022-22476 is high with a CVSS score of 8.8.

Q: Which software versions are affected by CVE-2022-22476?

IBM WebSphere Application Server Liberty version 17.0.0.3 through 22.0.0.7 and Open Liberty versions up to 22.0.0.8 are affected.

Q: What is the impact of CVE-2022-22476?

This vulnerability allows an authenticated user to spoof their identity using a specially crafted request.

Q: Are there any references for more information about CVE-2022-22476?

Yes, you can find more information about CVE-2022-22476 at the following references: [link1](https://exchange.xforce.ibmcloud.com/vulnerabilities/225604), [link2](https://www.ibm.com/support/pages/node/6602015), [link3](https://www.ibm.com/support/pages/node/6953617).

Published Jul 8, 2022

Updated

IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.

Affected Software

3 affected components

IBM Open Liberty>=17.0.0.3<22.0.0.8

IBM WebSphere Application Server>=17.0.0.3<22.0.0.8

IBM Spectrum Control<=5.4

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6602015

Event History

Jul 8, 2022

CVE Published

via MITRE·05:45 PM

Data Sourced

via MITRE·05:45 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6847541

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-22476.

What is the severity of CVE-2022-22476?

The severity of CVE-2022-22476 is high with a CVSS score of 8.8.

Which software versions are affected by CVE-2022-22476?