CVE-2022-22365

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0

Description The issue allows a man-in-the-middle attacker to spoof SSL server hostnames, enabling spoofing attacks. This is possible when the Ajax Proxy Web Application (AjaxProxy.war) is deployed.

Recommendations For IBM WebSphere Application Server versions 7.0 through 9.0, consider disabling the Ajax Proxy Web Application (AjaxProxy.war) as a temporary workaround to minimize the risk of exploitation. Restrict access to sensitive resources to prevent man-in-the-middle attacks until a patch is available.