VULNERABILITY INTELLIGENCE

CVE-2018-1420

CVSS score5.3 MEDIUM
EPSS probability1.34%
CISA KEVNot currently listed
Published2018-10-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references