CVE-2018-1957

No fix known EPSS <1%CVSS 4.0

IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequest#authenticate() API when an unprotected URI is accessed. IBM X-Force ID: 153629.

Published 2018-12-10 · CVE record · OSV

Products: ibm websphere_application_server