CVE-2018-1901
At a glance Severity MEDIUM 5.0 EPSS EPSS 1.50 % · percentile 74 (2026-10-27) State PUBLISHED Published 2018-12-12 Updated 2024-09-16 Assigner ibm NVD status Modified Description IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on the system, caused by incorrect cached value being used. IBM X-Force ID: 152530.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 5.0 CVSS:3.0/A:L/AC:H/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O ibm CVSS 3.0 MEDIUM 5.0 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L NVD · psirt@us.ibm.com (Secondary) CVSS 3.0 HIGH 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P NVD · nvd@nist.gov (Primary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:* ≥ 8.5.0.0 ≤ 8.5.5.14cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:* ≥ 9.0.0.0 ≤ 9.0.0.9Affected products
References
Sources
