CVE-2023-50313: IBM WebSphere Application Server information disclosure
First published: Mon Apr 01 2024(Updated: )
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274812.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Application Server Feature Pack for Web Services | =8.5 | |
| IBM WebSphere Application Server Feature Pack for Web Services | =9.0 | |
| IBM WebSphere Application Server Feature Pack for Web Services | <=9.0 | |
| IBM WebSphere Application Server Feature Pack for Web Services | <=8.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-50313?
CVE-2023-50313 has a medium severity rating due to potential weaknesses in outbound TLS connections.
How do I fix CVE-2023-50313?
To fix CVE-2023-50313, ensure that your IBM WebSphere Application Server configurations are set correctly to honor the desired security settings.
Which versions of IBM WebSphere Application Server are affected by CVE-2023-50313?
CVE-2023-50313 affects IBM WebSphere Application Server versions 8.5 and 9.0.
What security risk does CVE-2023-50313 pose?
CVE-2023-50313 poses a security risk by potentially allowing weaker TLS configurations for outbound connections.
Is there a patch available for CVE-2023-50313?
Yes, IBM has released guidance on how to mitigate the issues related to CVE-2023-50313.
- agent/weakness
- agent/title
- agent/type
- agent/references
- agent/description
- agent/first-publish-date
- agent/author
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/ibm-support
- source/IBM
- vendor/ibm
- canonical/ibm websphere application server feature pack for web services
- version/ibm websphere application server feature pack for web services/8.5
- version/ibm websphere application server feature pack for web services/9.0