PT-2018-12347
CVE-2018-1420
·
Publicado
2018-10-01
·
Atualizado
2019-10-09
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Portal versions 7.0 through 9.0
Description
The issue concerns a security miss-configuration that occurs during the installation of Combined Cumulative Fix (CF) in IBM WebSphere Portal, where access control settings are reset to their out-of-the-box configuration.
Recommendations
For versions 7.0 through 9.0, after installing the Combined Cumulative Fix, manually review and reapply the necessary access control settings to ensure the security configuration is properly set up.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾