CVE-2017-1151

EUVD-2017-10167
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
ibmwebsphere_application_server
8.0
ibmwebsphere_application_server
8.5
ibmwebsphere_application_server
8.5.5
ibmwebsphere_application_server
9.0
𝑥
= Vulnerable software versions
References
http://www.ibm.com/support/docview.wss?uid=swg21999293
http://www.securityfocus.com/bid/96841
http://www.securitytracker.com/id/1037984
http://www.ibm.com/support/docview.wss?uid=swg21999293
http://www.securityfocus.com/bid/96841
http://www.securitytracker.com/id/1037984