medium5.3
CVE-2018-1420
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation.
Impact
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Portal | Versions 7.0.0.0, 7.0.0.1, 7.0.0.2, 8.0.0.0, 8.0.0.1, 8.5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1041767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/138950
- https://www.ibm.com/support/docview.wss?uid=swg22014276
- http://www.securitytracker.com/id/1041767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/138950
- https://www.ibm.com/support/docview.wss?uid=swg22014276