WebSphere Extreme Scaleで制限回避、修正版あり
Summary
IBM WebSphere Extreme Scale 8.6.1.0〜8.6.2.2に、CSPの設定不備でセキュリティ上の制限を回避される脆弱性があります。回避策がないため、修正のiFix PH73641を適用してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
IBM WebSphere Extreme Scale 8.6.1.0〜8.6.2.2に、CSPの設定不備でセキュリティ上の制限を回避される脆弱性があります。回避策がないため、修正のiFix PH73641を適用してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| IBMWebSphere Extreme Scale |
8.6.1.0 – 8.6.2.2→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web psirt@us.ibm.com
- web nvd.nist.gov
- web github.com