PT-2018-12347 · Ibm · Ibm Websphere Portal

Publicado 2018-10-01 · Atualizado 2019-10-09 · CVE-2018-1420

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0 through 9.0

Description The issue concerns a security miss-configuration that occurs during the installation of Combined Cumulative Fix (CF) in IBM WebSphere Portal, where access control settings are reset to their out-of-the-box configuration.

Recommendations For versions 7.0 through 9.0, after installing the Combined Cumulative Fix, manually review and reapply the necessary access control settings to ensure the security configuration is properly set up.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-1420

Produtos afetados

Ibm Websphere Portal

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-1420 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1420 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/138950 · Aviso do Fabricante
• https://ibm.com/support/docview.wss?uid=swg22014276 · Aviso do Fabricante
• http://securitytracker.com/id/1041767 · Nota