CVE Catalog
CVE-2023-35890
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk0.12%
2th percentile - higher than 2% of all known CVEs
Summary
IBM WebSphere Application Server versions 8.5 and 9.0 may provide weaker than expected security due to improper encoding in a local configuration file.
Risk Assessment
The organization may be exposed to attacks that exploit security vulnerabilities arising from improper encoding, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to review and improve the encoding of local configuration files in IBM WebSphere Application Server to ensure an adequate level of security.
Original NVD description (English source)
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file. IBM X-Force ID: 258637.