8.7Hoch

CVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step

IBM WebSphere Application Server - Liberty; IBM WebSphere Application Server Veröffentlicht: (vor 1 Monat)

Beschreibung

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.

Schwachstellentyp (CWE): CWE-325

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
IBM WebSphere Application Server 8.5, 9.0
IBM WebSphere Application Server - Liberty 17.0.0.3 – ≤ 26.0.0.10

Referenzen und Patches