vulnerability

IBM WebSphere Application Server: CVE-2022-43917: IBM WebSphere Application Server traditional container is vulnerable to information disclosure

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:N/A:N)

Published

Jan 26, 2023

Added

Jul 27, 2023

Modified

Mar 27, 2026

Description

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.

Solutions

ibm-was-upgrade-8-5-5-17-8-5-5-23ibm-was-upgrade-9-0-0-9-9-0-5-15

References

CVE-2022-43917
https://attackerkb.com/topics/CVE-2022-43917
CWE-327
EUVD-EUVD-2022-46887
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46887
https://exchange.xforce.ibmcloud.com/vulnerabilities/241045
https://www.ibm.com/support/pages/node/6857007

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report