Vulnerabilities > CVE-2018-1840 - Exposure of Resource to Wrong Sphere vulnerability in IBM Websphere Application Server
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other than global federated repository and then migrated to a newer release of WebSphere Application Server. IBM X-Force ID: 150813.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Nessus
| NASL family | Web Servers |
| NASL id | WEBSPHERE_CVE-2018-1840.NASL |
| description | The IBM WebSphere Application Server running on the remote host is version 8.5.x prior to 8.5.5.15, or 9.0.0.x prior to 9.0.0.10. It is, therefore, affected by a privilege escalation vulnerability. This could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other than global federated repository and then migrated to a newer release of WebSphere Application Server. |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 133272 |
| published | 2020-01-28 |
| reporter | This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. |
| source | https://www.tenable.com/plugins/nessus/133272 |
| title | IBM WebSphere Application Server 8.5.x < 8.5.5.15 / 9.0.0.x < 9.0.0.10 Privilege Escalation (CVE-2018-1840) |