cbcvebase.
CVE-2018-1901
published 2018-12-12

CVE-2018-1901: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on the system, caused by incorrect cached…

high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on the system, caused by incorrect cached value being used. IBM X-Force ID: 152530.

Affected

5 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_application_server——
ibmwebsphere_application_server——
ibmwebsphere_application_server——
ibmwebsphere_application_server8.5.0.0 – 8.5.5.14—
ibmwebsphere_application_server9.0.0.0 – 9.0.0.9—

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ghsa6.5MEDIUM