CVE-2018-1614 : IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML res

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote attacker to obtain sensitive information. IBM X-Force ID: 144270.

Published 2018-06-26 20:29:00

Updated 2019-10-09 23:38:45

Source IBM Corporation

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2018-1614

IBM » Websphere Application Server » Version: 7.0
cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*
Matching versions
IBM » Websphere Application Server » Version: 8.0
cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*
Matching versions
IBM » Websphere Application Server » Version: 9.0
cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*
Matching versions
IBM » Websphere Application Server » Version: 8.5
cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2018-1614

Top countries where our scanners detected CVE-2018-1614

Top open port discovered on systems with this issue 9080

IPs affected by CVE-2018-1614 547

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-1614!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-1614

EPSS FAQ

0.20%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 57 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-1614

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
5.8	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N	3.9	1.4	IBM Corporation
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2018-1614

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-1614

https://www-01.ibm.com/support/docview.wss?uid=swg22016887https://www-01.ibm.com/support/docview.wss?uid=swg22016887

IBM notice: The page you requested cannot be displayed
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/144270

IBM WebSphere Application Server information disclosure CVE-2018-1614 Vulnerability Report
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1041168

IBM WebSphere Application Server Unspecified Flaw in SAML Response Processing Lets Remote Users Obtain Potentially Sensitive Information on the Target System - SecurityTracker
Third Party Advisory;VDB Entry