IBM WebSphere Application Server: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 6.1
  CVE-2021-46708

  Spoofing attack in swagger-ui-dist

  The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's cli…

  swagger-ui-dist npm
  Mar 11, 2022
• Medium 4.3
  CVE-2018-25031 Public exploit EPSS 42%

  Spoofing attack in swagger-ui

  Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be r…

  swagger-ui org.webjars:swagger-ui npm Maven
  Mar 11, 2022

Revision history

1. 2023-02-15 #3

   Neue Updates von IBM aufgenommen

2. 2022-08-14 #2

   Neue Updates von HCL aufgenommen

3. 2022-04-05 #1

   Initiale Fassung

References

• IBM Security Bulletin 6955817 vom 2023-02-15
  https://www.ibm.com/support/pages/node/6955817
• IBM Security Advisory vom 2022-04-05
  https://www.ibm.com/support/pages/node/6569505
• HCL Article KB0099667 vom 2022-08-13
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099667