IBM WebSphere Application Server Liberty Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.3, specifically when the restConnector-1.0 or restConnector-2.0 feature is enabled. This vulnerability allows a privileged user to gain additional access to the application server.

Impact

Exploitation of this vulnerability could lead to unauthorized access rights, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users are advised to upgrade to IBM WebSphere Application Server Liberty Fix Pack 26.0.0.4 or later, or to apply the Interim Fix that resolves PH70327. Additional interim fixes may be available and linked off the interim fix download page.