IBM Security Bulletin: Potential cross-site request forgery in WebSphere Application Server Admin Console (CVE-2018-1926)
Dec 11, 2018 9:02 am EST
Categorized: Medium Severity
Share this post:
There is a potential cross-site request forgery in WebSphere Application Server Admin Console (CVE-2018-1926)
CVE(s): CVE-2018-1926
Affected product(s) and affected version(s):
This vulnerability affects the following:
- WebSphere Application Server Version 9.0
- WebSphere Application Server Version 8.5
- WebSphere Virtual Enterprise Version 8.0
- WebSphere Virtual Enterprise Version 7.0
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10742301
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152992
from IBM Product Security Incident Response Team https://ift.tt/2SHkHAK