CVE-2018-1902

🗓️ 11 Mar 2019 22:00:00Reported by ibmType

IBM WebSphere AppServer allows remote attackers to spoof connection info, leading to further attacks

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2018-1902)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Client certificates can be spoofed in Liberty for Java for IBM Cloud (CVE-2018-1902)	13 May 201921:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities (CVE-2018-1902, CVE-2018-1968, CVE-2019-4046)	2 Jul 201916:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server bundled with IBM WebSphere Application Server Patterns	11 Mar 201912:25	–	ibm
IBM Security Bulletins	Security Bulletin: Spoofing and denial of service vulnerabilities in WebSphere Application Liberty affect IBM Spectrum Protect Snapshot for VMware (CVE-2018-1902, CVE-2019-4046)	1 Feb 202211:37	–	ibm
IBM Security Bulletins	Security Bulletin: Content Collector for Email is affected by a Client certificates can be spoofed in WebSphere Application Server	30 Apr 201916:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server Liberty that affect IBM Spectrum Protect for Workstations Central Administration Console	12 Sep 201923:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Access Manager for eBusiness (CVE-2018-1902)	24 Sep 201912:19	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Spoofing vulnerability in WebSphere Application Server (CVE-2018-1902)	3 May 201919:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager (CVE-2018-1902, CVE-2019-4046)	26 Mar 201921:35	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange<19.0.0.3liberty

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.15

ibm websphere_application_serverRange9.0.0.0–9.0.0.10

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/152531
securityfocus	www.securityfocus.com/bid/107383
ibm	www.ibm.com/support/docview.wss

21 Nov 2024 04:00Current

4.5Medium risk

Vulners AI Score4.5

CVSS 24

CVSS 33.1 - 4.3

EPSS0.00261

CWE-200