cbcvebase.
CVE-2018-1840
published 2018-12-03

CVE-2018-1840: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is…

high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other than global federated repository and then migrated to a newer release of WebSphere Application Server. IBM X-Force ID: 150813.

Affected

4 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_application_server——
ibmwebsphere_application_server——
ibmwebsphere_application_server8.5.0.0 – 8.5.5.14—
ibmwebsphere_application_server9.0.0.0 – 9.0.0.9—

CVSS provenance

nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
ghsa6.5MEDIUM