5.0
Moyenne
CVE-2018-1672 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios,…
Description
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WebSphere Portal | 9.0 | Pas de correctif indiqué |
| WebSphere Portal | 8.5 | Pas de correctif indiqué |
| WebSphere Portal | 8.0 | Pas de correctif indiqué |
| WebSphere Portal | 7.0 | Pas de correctif indiqué |
Autres CVE de WebSphere Portal
Les 20 CVE de WebSphere Portal →
CVE-2018-1673
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
6.1
Moyenne
CVE-2018-1420
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during…
5.3
Moyenne
CVE-2018-1660
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2018-1820
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
5.4
Moyenne