VYPR
High severity8.1NVD Advisory· Published Mar 20, 2017· Updated May 13, 2026

CVE-2017-1151

CVE-2017-1151

Description

IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.

Affected products

5
  • cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*
  • IBM Corporation/WebSphere Application Serverv5
    Range: 8.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.