vulnerability
IBM WebSphere Application Server: CVE-2019-17495: Swagger vulnerability affects WebSphere Application Server Liberty (CVE-2019-17495)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | 2019-10-10 | 2020-02-18 | 2020-02-18 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2019-10-10
Added
2020-02-18
Modified
2020-02-18
Description
A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that
Solution(s)
ibm-was-install-8-5-ph20161-libertyibm-was-upgrade-8-5-20-0-0-1-liberty
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.