IBM WebSphere Application Server: CVE-2023-0482: IBM WebSphere Application Server Liberty is vulnerable to a privilege escalation due to RESTEasy (CVE-2023-0482)

IBM WebSphere Application Server: CVE-2023-0482: IBM WebSphere Application Server Liberty is vulnerable to a privilege escalation due to RESTEasy (CVE-2023-0482)

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:C/I:N/A:N)

Published

02/17/2023

Created

05/12/2023

Added

05/12/2023

Modified

01/28/2025

Description

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

Solution(s)

• ibm-was-install-8-5-ph53883-liberty
• ibm-was-upgrade-8-5-23-0-0-4-liberty

References

• https://attackerkb.com/topics/cve-2023-0482
• CVE - 2023-0482