Not rated
CVE-2017-1151 IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust…
Description
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere Application Server | 9.0 | No fix stated |
| WebSphere Application Server 8.5 | 8.5 → 8.5.5 | No fix stated |
| WebSphere Application Server | 8.0 | No fix stated |
Other CVEs of WebSphere Application Server
The 4 CVEs of WebSphere Application Server →
CVE-2017-1137
IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security
Not rated
CVE-2017-1121
IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting
Not rated
CVE-2016-8919
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from…
Not rated