CVE-2021-39031

IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection

High · published January 25, 2022

CVSS v3.0
7.5
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 213875.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/C:H/I:H/AC:H/S:U/AV:N/PR:L/A:H/UI:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.02017 · 80.8th percentile
Published
2022-01-25T16:25Z
EPSS history
Timeline
  • 25 JAN 16:25Z
    IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection
    cvelistv5