CVE-2022-43917

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:traditional:*:*:*
cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:traditional:*:*:*
OR cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:z\/os:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*

History

21 Nov 2024, 07:27

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/241045 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/241045 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/6857007 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/6857007 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : 7.5
v2 : unknown
v3 : 5.9
Summary
  • (es) El contenedor tradicional IBM WebSphere Application Server 8.5 y 9.0 utiliza claves criptográficas más débiles de lo esperado que podrían permitir a un atacante descifrar información confidencial. Esto afecta sólo a la versión en contenedores de WebSphere Application Server tradicional. ID de IBM X-Force: 241045.

Information

Published : 2023-01-26 21:17

Updated : 2024-11-21 07:27


NVD link : CVE-2022-43917

Mitre link : CVE-2022-43917

CVE.ORG link : CVE-2022-43917


JSON object : View

Products Affected

ibm

  • z\/os
  • i
  • websphere_application_server
  • aix

hp

  • hp-ux

oracle

  • solaris

linux

  • linux_kernel

microsoft

  • windows
CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm