CVE-2018-1901

Published: Dic 12, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-12480 Aliases: GSD-2018-1901
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,0
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: low
MEDIUM 6,5
Access Vector: network
Access Complexity: low
Authentication: single
Confidentiality: partial
Integrity: partial
Availability: partial

Description

AI Translation Available

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on the system, caused by incorrect cached value being used. IBM X-Force ID: 152530.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0074
Percentile
0,7th
Updated

EPSS Score Trend (Last 90 Days)

Application

Websphere Application Server by Ibm

Version Range Affected
From 9.0.0.0 (inclusive)
To 9.0.0.9 (inclusive)
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Websphere Application Server by Ibm

Version Range Affected
From 8.5.0.0 (inclusive)
To 8.5.5.14 (inclusive)
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://exchange.xforce.ibmcloud.com/vulnerabilities/152530
https://www.ibm.com/support/docview.wss?uid=ibm10738727
https://exchange.xforce.ibmcloud.com/vulnerabilities/152530
https://www.ibm.com/support/docview.wss?uid=ibm10738727