CVE-2018-1851

State: PUBLISHED · Published: 2018-10-31 · Updated: 2024-09-16 · Assigner: ibm

Description

IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization. By sending a specially-crafted request to the RP service, an attacker could exploit this vulnerability to execute arbitrary code. IBM X-Force ID: 150999.

CWE

(none)

Affected

IBM / WebSphere Application Server — v=Liberty [affected]

CVSS

3.0 score=7.3 severity=HIGH CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/150999 vdb-entry, x_refsource_XF
https://www.ibm.com/support/docview.wss?uid=ibm10735105 x_refsource_CONFIRM
http://www.securityfocus.com/bid/105839 vdb-entry, x_refsource_BID

Source

cvelistV5-main/cves/2018/1xxx/CVE-2018-1851.json