CVE-2018-1840

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is…

Medium · published December 3, 2018

CVSS v3.0
6.0
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other than global federated repository and then migrated to a newer release of WebSphere Application Server. IBM X-Force ID: 150813.

The record
Technical detail
CVSS v3.0
6.0 · MEDIUM
Vector
CVSS:3.0/A:L/AC:H/AV:N/C:L/I:L/PR:L/S:C/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.02138 · 81.8th percentile
Published
2018-12-03T15:00Z
EPSS history
Timeline
  • 03 DEC 15:00Z
    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is…
    cvelistv5