Multiple vulnerabilities in IBM WebSphere Application Server Liberty allow a remote attacker to trigger elevation of privilege, spoofing, information disclosure, data manipulation, and security restriction bypass. Affected versions include Liberty from 17.0.0.3 through 26.0.0.3. IBM has released fixes; administrators must apply the patches via the provided support links.
Multiple vulnerabilities were identified in IBM WebSphere Products. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, spoofing, sensitive information disclosure, data manipulation and security restriction bypass on the targeted system. Impact Information Disclosure Security Restriction Bypass Data Manipulation Elevation of Privilege Spoofing System / Technologies affected WebSphere Application Server - Liberty 17.0.0.3 - 26.0.0.3 Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://www.ibm.com/support/pages/node/7267345 https://www.ibm.com/support/pages/node/7267347 https://www.ibm.com/support/pages/node/7267351 https://www.ibm.com/support/pages/node/7267362