CVE-2018-1851

No fix known EPSS 4%CVSS 7.3

IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization. By sending a specially-crafted request to the RP service, an attacker could exploit this vulnerability to execute arbitrary code. IBM X-Force ID: 150999.

Published 2018-10-31 · CVE record · OSV

Products: ibm websphere_application_server