{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "notes": [ { "category": "summary", "text": "IBM WebSphere Application Server Liberty is affected by server-side request forgery with the samlWeb-2.0 feature enabled." } ], "publisher": { "category": "vendor", "contact_details": "$PLACEHOLDER", "name": "IBM", "namespace": "https://www.ibm.com" }, "references": [ { "category": "external", "summary": "Security Bulletin web URL", "url": "https://www.ibm.com/support/pages/node/7267347" }, { "category": "self", "summary": "Canonical link to Security Bulletin CSAF", "url": "https://public.dhe.ibm.com/ibmdl/export/pub/software/websphere/automation/bulletins/7267347.json" } ], "title": "IBM WebSphere Application Server Liberty is affected by server-side request forgery (CVE-2026-1561)", "tracking": { "current_release_date": "2026-03-24T12:00:00.000Z", "generator": { "date": "2026-03-24T12:00:00.000Z", "engine": { "name": "IBM WSA CSAF Script Suite (Internal Use Only)", "version": "1.0.0" } }, "id": "7267347", "initial_release_date": "2026-03-24T12:00:00.000Z", "revision_history": [ { "date": "2026-03-24T12:00:00.000Z", "number": "1", "summary": "Initial Publication" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=26.0.0.1|<=26.0.0.3", "product": { "name": "IBM WebSphere Application Server Liberty 26.0 vers:vrmf/>=26.0.0.1|<=26.0.0.3", "product_id": "CSAFPID-0001" } } ], "name": "26.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=17.0.0.3|<=17.0.0.4", "product": { "name": "IBM WebSphere Application Server Liberty 17.0 vers:vrmf/>=17.0.0.3|<=17.0.0.4", "product_id": "CSAFPID-0002" } } ], "name": "17.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=18.0.0.1|<=18.0.0.4", "product": { "name": "IBM WebSphere Application Server Liberty 18.0 vers:vrmf/>=18.0.0.1|<=18.0.0.4", "product_id": "CSAFPID-0003" } } ], "name": "18.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=19.0.0.1|<=19.0.0.12", "product": { "name": "IBM WebSphere Application Server Liberty 19.0 vers:vrmf/>=19.0.0.1|<=19.0.0.12", "product_id": "CSAFPID-0004" } } ], "name": "19.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=20.0.0.1|<=20.0.0.12", "product": { "name": "IBM WebSphere Application Server Liberty 20.0 vers:vrmf/>=20.0.0.1|<=20.0.0.12", "product_id": "CSAFPID-0005" } } ], "name": "20.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=21.0.0.1|<=21.0.0.12", "product": { "name": "IBM WebSphere Application Server Liberty 21.0 vers:vrmf/>=21.0.0.1|<=21.0.0.12", "product_id": "CSAFPID-0006" } } ], "name": "21.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=22.0.0.1|<=22.0.0.13", "product": { "name": "IBM WebSphere Application Server Liberty 22.0 vers:vrmf/>=22.0.0.1|<=22.0.0.13", "product_id": "CSAFPID-0007" } } ], "name": "22.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=23.0.0.1|<=23.0.0.12", "product": { "name": "IBM WebSphere Application Server Liberty 23.0 vers:vrmf/>=23.0.0.1|<=23.0.0.12", "product_id": "CSAFPID-0008" } } ], "name": "23.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=24.0.0.1|<=24.0.0.12", "product": { "name": "IBM WebSphere Application Server Liberty 24.0 vers:vrmf/>=24.0.0.1|<=24.0.0.12", "product_id": "CSAFPID-0009" } } ], "name": "24.0", "category": "product_version" }, { "branches": [ { "category": "product_version_range", "name": "vers:vrmf/>=25.0.0.1|<=25.0.0.12", "product": { "name": "IBM WebSphere Application Server Liberty 25.0 vers:vrmf/>=25.0.0.1|<=25.0.0.12", "product_id": "CSAFPID-0010" } } ], "name": "25.0", "category": "product_version" }, { "category": "patch_level", "name": "26.0.0.4", "product": { "name": "IBM WebSphere Application Server Liberty 26.0.0.4", "product_id": "CSAFPID-0013" } } ], "category": "product_name", "name": "WebSphere Application Server Liberty" } ], "category": "vendor", "name": "IBM" } ], "full_product_names": [ { "name": "Feature: samlWeb-2.0", "product_id": "CSAFPID-0011" }, { "name": "Mac OS", "product_id": "CSAFPID-0014" }, { "name": "IBM i", "product_id": "CSAFPID-0015" }, { "name": "Linux", "product_id": "CSAFPID-0016" }, { "name": "Windows", "product_id": "CSAFPID-0017" }, { "name": "z/OS", "product_id": "CSAFPID-0018" }, { "name": "AIX", "product_id": "CSAFPID-0019" }, { "name": "PH70017", "product_id": "CSAFPID-0012" } ], "product_groups": [ { "group_id": "CSAFGID-0001", "product_ids": [ "CSAFPID-0014", "CSAFPID-0015", "CSAFPID-0016", "CSAFPID-0017", "CSAFPID-0018", "CSAFPID-0019" ], "summary": "Operating Systems" } ], "relationships": [ { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 26.0 APAR Remediation Action", "product_id": "CSAFPID-0020" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0001" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 17.0 APAR Remediation Action", "product_id": "CSAFPID-0021" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0002" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 18.0 APAR Remediation Action", "product_id": "CSAFPID-0022" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0003" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 19.0 APAR Remediation Action", "product_id": "CSAFPID-0023" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0004" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 20.0 APAR Remediation Action", "product_id": "CSAFPID-0024" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0005" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 21.0 APAR Remediation Action", "product_id": "CSAFPID-0025" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0006" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 22.0 APAR Remediation Action", "product_id": "CSAFPID-0026" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0007" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 23.0 APAR Remediation Action", "product_id": "CSAFPID-0027" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0008" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 24.0 APAR Remediation Action", "product_id": "CSAFPID-0028" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0009" }, { "category": "installed_on", "full_product_name": { "name": "IBM WebSphere Application Server Liberty 25.0 APAR Remediation Action", "product_id": "CSAFPID-0029" }, "product_reference": "CSAFPID-0012", "relates_to_product_reference": "CSAFPID-0010" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-1561", "notes": [ { "category": "description", "text": "IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks." } ], "product_status": { "fixed": [ "CSAFPID-0013" ], "known_affected": [ "CSAFPID-0001", "CSAFPID-0010", "CSAFPID-0005", "CSAFPID-0007", "CSAFPID-0004", "CSAFPID-0003", "CSAFPID-0006", "CSAFPID-0009", "CSAFPID-0002", "CSAFPID-0008" ] }, "references": [ { "category": "external", "summary": "Complete CVSS v3 Guide", "url": "https://www.first.org/cvss/user-guide" }, { "category": "external", "summary": "On-line Calculator v3", "url": "https://www.first.org/cvss/calculator/3.0" }, { "category": "external", "summary": "Complete CVSS v4 Guide", "url": "https://www.first.org/cvss/user-guide" }, { "category": "external", "summary": "On-line Calculator v4", "url": "https://www.first.org/cvss/calculator/4.0" } ], "remediations": [ { "category": "vendor_fix", "details": "Upgrade to minimal fix pack levels as required by the interim fix and then apply the Interim Fix that resolves PH70017", "product_ids": [ "CSAFPID-0009", "CSAFPID-0001", "CSAFPID-0010", "CSAFPID-0005", "CSAFPID-0007", "CSAFPID-0004", "CSAFPID-0003", "CSAFPID-0006", "CSAFPID-0008", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Apply Liberty Fix Pack 26.0.0.4 or later (targeted availability 2Q2026).", "product_ids": [ "CSAFPID-0009", "CSAFPID-0001", "CSAFPID-0010", "CSAFPID-0005", "CSAFPID-0007", "CSAFPID-0004", "CSAFPID-0003", "CSAFPID-0006", "CSAFPID-0008", "CSAFPID-0002" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0010", "CSAFPID-0005", "CSAFPID-0007", "CSAFPID-0004", "CSAFPID-0003", "CSAFPID-0006", "CSAFPID-0009", "CSAFPID-0002", "CSAFPID-0008" ] } ] } ] }