PT-2022-15392 · Ibm · Ibm Websphere Application Server

Published 2022-05-20 · Updated 2022-06-02 · CVE-2022-22365

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0

Description The issue allows a man-in-the-middle attacker to spoof SSL server hostnames, enabling spoofing attacks. This is possible when the Ajax Proxy Web Application (AjaxProxy.war) is deployed.

Recommendations For IBM WebSphere Application Server versions 7.0 through 9.0, consider disabling the Ajax Proxy Web Application (AjaxProxy.war) as a temporary workaround to minimize the risk of exploitation. Restrict access to sensitive resources to prevent man-in-the-middle attacks until a patch is available.

Fix

Related Identifiers

CVE-2022-22365

Affected Products

Ibm Websphere Application Server

References · 6

• https://ibm.com/support/pages/node/6587947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22365 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22365 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/220904 · Vendor Advisory
• https://t.me/cvenotify/30517 · Telegram Post
• https://t.me/cibsecurity/43070 · Telegram Post