CVE-2018-1614

published 2018-06-26

CVE-2018-1614: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote attacker to obtain…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote attacker to obtain sensitive information. IBM X-Force ID: 144270.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—

CWE-200