CVE-2018-1957

published 2018-12-10

CVE-2018-1957: IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect…

medium 5.5 CVSS 3.0

AV L AC L PR L UI N S U C H I N A N

IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequest#authenticate() API when an unprotected URI is accessed. IBM X-Force ID: 153629.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	9.0.0.0 – 9.0.0.9	—

CWE-200