Severity
Medium
Analysis Summary
CVE-2022-22365
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, is vulnerable to spoofing by allowing a man-in-the-middle attacker to spoof SSL server hostnames.
Impact
- Privilege Escalation
Indicators Of Compromise
CVE
- CVE-2022-22365
Affected Vendors
- IBM
Affected Products
- IBM WebSphere Application Server 7.0
- IBM WebSphere Application Server 8.0
- IBM WebSphere Application Server 8.5
- IBM WebSphere Application Server 9.0
Remediation
Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.