CVEvulnerability

CVE-2017-1731

8.8 HIGH Published 2018-01-30 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2018-01-30
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.

Affected configurations

• ibm websphere application server (>= 7.0.0.0 <= 7.0.0.43) • ibm websphere application server (>= 8.0.0.0 <= 8.0.0.14) • ibm websphere application server (>= 8.5.0.0 <= 8.5.5.13) • ibm websphere application server (>= 9.0.0.0 <= 9.0.0.6)

References

http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R Vendor Advisory
http://www.securityfocus.com/bid/102911 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040356 Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/134912 VDB Entry, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R Vendor Advisory
http://www.securityfocus.com/bid/102911 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040356 Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/134912 VDB Entry, Vendor Advisory