CVE-2018-1902: Infoleak
Published Mar 11, 2019
·Updated
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM X-Force ID: 152531.
Affected Software
5 affected components
IBM WebSphere Application Server Feature Pack for Web Services<19.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services>=7.0.0.0<=7.0.0.45
IBM WebSphere Application Server Feature Pack for Web Services>=8.0.0.0<=8.0.0.15
IBM WebSphere Application Server Feature Pack for Web Services>=8.5.0.0<=8.5.5.15
IBM WebSphere Application Server Feature Pack for Web Services>=9.0.0.0<=9.0.0.10
Remediation
Patch Available
Event History
Mar 11, 2019
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1902?
CVE-2018-1902 is classified as a medium severity vulnerability.
2
How do I fix CVE-2018-1902?
To fix CVE-2018-1902, update IBM WebSphere Application Server to version 19.0.0.3 or later.
3
Who is affected by CVE-2018-1902?
CVE-2018-1902 affects IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 prior to specific version updates.
4
What type of attack can be executed through CVE-2018-1902?
CVE-2018-1902 allows remote attackers to spoof connection information to launch further attacks.
5
What is the impact of CVE-2018-1902 on IBM WebSphere Application Server?
The impact of CVE-2018-1902 includes potential data breaches and unauthorized access to the system.