CVE-2018-1672

EPSS 1.16%
Veröffentlicht 01.10.2018 14:29:00
Zuletzt bearbeitet 21.11.2024 04:00:10
Erkennungen
Login

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 6

NVD 79 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Websphere Portal Version 7.0.0.0

Ibm ≫ Websphere Portal Version 7.0.0.1 Update -

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf011

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf012

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf013

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf014

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf015

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf016

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf017

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf018

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf019

Ibm ≫ Websphere Portal Version 7.0.0.1 Update cf020

Ibm ≫ Websphere Portal Version 7.0.0.2 Update -

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf012

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf013

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf014

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf015

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf016

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf017

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf018

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf019

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf020

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf021

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf022

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf023

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf024

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf025

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf026

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf027

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf028

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf029

Ibm ≫ Websphere Portal Version 7.0.0.2 Update cf030

Ibm ≫ Websphere Portal Version 8.0.0.0 Update -

Ibm ≫ Websphere Portal Version 8.0.0.0 Update cf01

Ibm ≫ Websphere Portal Version 8.0.0.0 Update cf02

Ibm ≫ Websphere Portal Version 8.0.0.0 Update cf03

Ibm ≫ Websphere Portal Version 8.0.0.0 Update cf04

Ibm ≫ Websphere Portal Version 8.0.0.0 Update cf05

Ibm ≫ Websphere Portal Version 8.0.0.0 Update cf06

Ibm ≫ Websphere Portal Version 8.0.0.1 Update -

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf04

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf05

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf06

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf07

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf08

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf09

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf10

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf11

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf12

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf13

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf14

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf15

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf16

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf17

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf18

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf19

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf20

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf21

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf22

Ibm ≫ Websphere Portal Version 8.0.0.1 Update cf23

Ibm ≫ Websphere Portal Version 8.5.0.0 Update -

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf01

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf02

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf03

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf04

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf05

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf06

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf07

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf08

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf09

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf10

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf11

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf12

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf13

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf14

Ibm ≫ Websphere Portal Version 8.5.0.0 Update cf15

Ibm ≫ Websphere Portal Version 9.0.0.0 Update -

Ibm ≫ Websphere Portal Version 9.0.0.0 Update cf14

Ibm ≫ Websphere Portal Version 9.0.0.0 Update cf15

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.16%	0.629

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.3	2.8	3.4	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
IBM	5	1.6	3.4	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securitytracker.com/id/1041766

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/144958

Vendor Advisory

VDB Entry

https://www.ibm.com/support/docview.wss?uid=ibm10716981

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-1672

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-1672

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-1672

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-1672