An IBM WebSphere Application Server Vulnerability has been addressed.
CVE-2022-22476
On July 8, 2022, The National Vulnerability Database published that IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. It was given a score of 8.8 (High).
On July 27 IBM published the following recommendations and fixes:
For IBM WebSphere Application Server Liberty 17.0.0.3 – 22.0.0.7 using the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0 or appSecurity-4.0 feature(s):
· Upgrade to minimal fix pack levels as required by interim fix and then apply Interim Fix PH47867
–OR–
· Apply Liberty Fix Pack 22.0.0.8 or later (targeted availability 3Q2022).