Security Advisory

CVE-2018-1851

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-31 13:00:00
Last updated 2024-09-16 20:01:38
Assigner ibm
CVSS score 7.3
State PUBLISHED

Description

IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization. By sending a specially-crafted request to the RP service, an attacker could exploit this vulnerability to execute arbitrary code. IBM X-Force ID: 150999.