Security features bypass in IBM WebSphere Application Server - CVE-2018-1719
Published: September 25, 2023
Vulnerability identifier: #VU81084
CSH Severity: Medium
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1719
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to bypass security restrictions.
The vulnerability exists due to excessive data output by the application. A remote attacker can bypass security restrictions.
Affected software
IBM WebSphere Application Server
IBM Tivoli System Automation Application Manager
Tivoli Network Manager IP Edition
IBM Tivoli System Automation Application Manager
Tivoli Network Manager IP Edition
How to mitigate CVE-2018-1719
Install updates from vendor's website.