| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 8.5.5.8= 8.5.5.9 |
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free