跳转到帖子

IBM WebSphere Application Server: CVE-2022-45787: IBM WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache James MIME4J (CVE-2022-45787)

recommended_posts

发布于
  • Members

IBM WebSphere Application Server: CVE-2022-45787: IBM WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache James MIME4J (CVE-2022-45787)

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:N)
Published
01/06/2023
Created
03/13/2023
Added
03/13/2023
Modified
01/28/2025

Description

Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j version 0.8.9 or later.

Solution(s)

  • ibm-was-install-8-5-ph52079-liberty
  • ibm-was-upgrade-8-5-23-0-0-2-liberty

References

  • https://attackerkb.com/topics/cve-2022-45787
  • CVE - 2022-45787
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…