CVE-2018-1996

🗓️ 19 Feb 2019 17:00:00Reported by ibmType

IBM WebSphere App Server TLS config vulnerability. Allows remote attackers to obtain sensitive info using man-in-the-middle. CVE-2018-199

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: Content Collector for Email is affected by a Weaker than expected security when using transition mode for SP800-131a in WebSphere App Server	13 Aug 201911:56	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase (CVE-2018-1996)	28 Feb 201919:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud	5 Mar 201917:10	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2018-1996)	20 Feb 201909:50	–	ibm
IBM Security Bulletins	Security Bulletin: Weaker than expected security in WebSphere Application Server (which is shipped with Jazz for Service Management) with SP800-131 transition mode (CVE-2018-1996)	1 Aug 201912:58	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM ILOG Optimization Decision Manager Enterprise (CVE-2018-1996)	12 Mar 201911:05	–	ibm
IBM Security Bulletins	Security Bulletin: Weaker than expected security in WebSphere Application Server with SP800-131 transition mode (CVE-2018-1996)	14 Mar 201918:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring embedded WebSphere Application Server	9 Apr 201922:05	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Message Broker is affected by a Websphere Application Server Vulnerability (CVE-2018-1996)	23 Dec 201902:57	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability is identified in the WebSphere Application Server where the Rational Asset Manager is deployed (CVE-2018-1996)	7 Mar 201907:35	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.14

ibm websphere_application_serverRange9.0.0.0–9.0.0.10

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/107155
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/154650

21 Nov 2024 04:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 35.3

EPSS0.00089

CWE-327