CVE-2018-1420 in WebSphere Portal

सारांश

द्वारा MITRE

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• जिम्मेदार: IBM Corporation
• आरक्षित करना: 12/12/2017
• प्रकटीकरण: 01/10/2018
• संयम: स्वीकृत
• प्रविष्टि: VDB-124642
• CPE: तैयार
• CWE: CWE-284 (पुष्टि की गई)
• CVSS: 6.5 (NVD)
• EPSS: 0.01341
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Telecommunication, Energy, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-1420
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-1420
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-1420/