vulnerability
IBM WebSphere Application Server: CVE-2023-0482: IBM WebSphere Application Server Liberty is vulnerable to a privilege escalation due to RESTEasy (CVE-2023-0482)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:S/C:C/I:N/A:N) | Feb 17, 2023 | May 12, 2023 | Aug 11, 2025 |
Severity
5
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:N)
Published
Feb 17, 2023
Added
May 12, 2023
Modified
Aug 11, 2025
Description
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.
Solutions
ibm-was-install-8-5-ph53883-libertyibm-was-upgrade-8-5-23-0-0-4-liberty
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.