CVE-2018-1672

No fix known EPSS 1%CVSS 5.0

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958.

Published 2018-10-01 · CVE record · OSV

Products: ibm websphere_portal