vulnerability
IBM WebSphere Application Server: CVE-2016-2945: WebSphere Application Server Liberty API Discovery feature has potential vulnerability (CVE-2016-2945)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:S/C:P/I:P/A:P) | Jul 7, 2016 | Apr 27, 2018 | Apr 14, 2025 |
Severity
6
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:P)
Published
Jul 7, 2016
Added
Apr 27, 2018
Modified
Apr 14, 2025
Description
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
Solutions
ibm-was-install-8-5-5-8-pi62450-libertyibm-was-upgrade-8-5-5-8-16-0-0-2-liberty
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.