We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-35890

IBM WebSphere Application Server information disclosure



Description

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file. IBM X-Force ID: 258637.

Reserved 2023-06-20 | Published 2023-07-07 | Updated 2024-10-24 | Assigner ibm


MEDIUM: 5.1CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Product status

Default status
unaffected

8.5, 9.0
affected

References

www.ibm.com/support/pages/node/7007857 vendor-advisory

https//www.ibm.com/support/pages/node/7007857 vdb-entry

cve.org (CVE-2023-35890)

nvd.nist.gov (CVE-2023-35890)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-35890

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.