medium5.9
CVE-2018-1719
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions.
Impact
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This could result in a downgrade of TLS protocol. A remote attacker could exploit this vulnerability to perform man-in-the-middle attacks. IBM X-Force ID: 147292.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | from 8.5.0.0 through 8.5.5.14 from 9.0.0.0 through 9.0.0.8 |
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1041718
- https://exchange.xforce.ibmcloud.com/vulnerabilities/147292
- https://www.ibm.com/support/docview.wss?uid=ibm10718837
- http://www.securitytracker.com/id/1041718
- https://exchange.xforce.ibmcloud.com/vulnerabilities/147292
- https://www.ibm.com/support/docview.wss?uid=ibm10718837