mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
102 lines
3.2 KiB
JSON
102 lines
3.2 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "psirt@us.ibm.com",
|
|
"DATE_PUBLIC": "2018-09-25T00:00:00",
|
|
"ID": "CVE-2018-1420",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "WebSphere Portal",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "7.0"
|
|
},
|
|
{
|
|
"version_value": "8.0"
|
|
},
|
|
{
|
|
"version_value": "8.5"
|
|
},
|
|
{
|
|
"version_value": "9.0"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "IBM"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950."
|
|
}
|
|
]
|
|
},
|
|
"impact": {
|
|
"cvssv3": {
|
|
"BM": {
|
|
"A": "N",
|
|
"AC": "H",
|
|
"AV": "N",
|
|
"C": "N",
|
|
"I": "H",
|
|
"PR": "L",
|
|
"S": "U",
|
|
"SCORE": "5.300",
|
|
"UI": "N"
|
|
},
|
|
"TM": {
|
|
"E": "U",
|
|
"RC": "C",
|
|
"RL": "O"
|
|
}
|
|
}
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Data Manipulation"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "ibm-websphere-cve20181420-improper-access(138950)",
|
|
"refsource": "XF",
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/138950"
|
|
},
|
|
{
|
|
"name": "https://www.ibm.com/support/docview.wss?uid=swg22014276",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://www.ibm.com/support/docview.wss?uid=swg22014276"
|
|
},
|
|
{
|
|
"name": "1041767",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id/1041767"
|
|
}
|
|
]
|
|
}
|
|
} |