2 matches found
CVE-2018-1957: Exposure of Sensitive Information to an Unauthorized Actor
IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequestauthenticate API when an unprotected URI is accessed. IBM X-Force ID: 153629...
5.5CVSS8.1AI score0.00405EPSS
SaveExploits0References2
PT-2018-6587
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server 9 Description: The issue allows a remote attacker to conduct spoofing attacks on installations using Form Login. Recommendations: For IBM WebSphere Application Server 9, update the configuration to prevent...
5.3CVSS0.02304EPSS
SaveExploits0References5
20