5.3
Medium
CVE-2018-1420 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during…
Description
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere Portal | 9.0 | No fix stated |
| WebSphere Portal | 8.5 | No fix stated |
| WebSphere Portal | 8.0 | No fix stated |
| WebSphere Portal | 7.0 | No fix stated |
Other CVEs of WebSphere Portal
The 20 CVEs of WebSphere Portal →
CVE-2018-1673
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
6.1
Medium
CVE-2018-1672
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios,…
5.0
Medium
CVE-2018-1820
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1660
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
5.4
Medium