CVE-2026-108284
Awaiting Analysis Awaiting Analysis - Queue

Authenticated Reader Role Information Disclosure in IBM WebSphere Liberty

Publication date: 2026-11-08

Last updated on: 2026-11-08

Assigner: IBM Corporation

Description
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-08
Last Modified
2026-11-08
Generated
2026-11-08
AI Q&A
2026-11-08
EPSS Evaluated
N/A
NVD
CVE-2026-108284
EUVD
EUVD-2026-119694

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
IBM WebSphere Application Server - Liberty From 17.0.0.3 (inc) to 26.0.0.10 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 have a vulnerability where an authenticated user with the Reader role can access sensitive information. This is due to improper access controls allowing unauthorized data exposure.

Impact Analysis

An attacker with Reader role access could exploit this to view confidential data, potentially leading to data breaches, unauthorized access to sensitive information, or further system compromise depending on the exposed data.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations by exposing personal or health data. Organizations may face fines, legal penalties, or reputational damage due to unauthorized data access.

Mitigation Strategies

Update IBM WebSphere Application Server Liberty to version 26.0.0.11 or later to address the vulnerability. This fix pack resolves the issue where an authenticated user with the Reader role could access sensitive information.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108284. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...