CVE-2018-1957

🗓️ 10 Dec 2018 14:00:00Reported by ibmType

IBM WebSphere App Server 9 mishandles data, exposing sensitive info via httpServletRequest#authenticate() API. IBM X-Force ID: 153629

Reporter	Title	Published	Views	Family All 19
IBM Security Bulletins	Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-1957)	13 Dec 201820:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2018-1957)	3 Jan 201900:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud	5 Mar 201917:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Access Manager for e-business	29 Jan 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Remote Server	17 Dec 201818:45	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2018-1957)	17 Jan 202317:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Rational products based on IBM Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server bundled with IBM WebSphere Application Server Patterns	17 Dec 201816:00	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Intelligent Operations Center (CVE-2018-1957)	8 Feb 201910:10	–	ibm
IBM Security Bulletins	Security Bulletin: Potential information disclosure in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1957)	4 Mar 201911:25	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange9.0.0.0–9.0.0.9

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/106203
ibm	www.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/153629

21 Nov 2024 04:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 22.1

CVSS 34 - 5.5

EPSS0.00066

CWE-200