{"id":"CVE-2018-1420","aliases":["EUVD-2018-11999","GHSA-xxr9-6j7m-9mvq"],"status":"published","title":"IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box...","description":"IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01341,"percentile":0.71524,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2018-10-01T14:29:00.313Z","modified":"2026-06-17T01:51:11Z","products":[{"vendor":"ibm","product":"websphere portal"},{"vendor":"ibm","product":"websphere_portal"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/138950","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://www.ibm.com/support/docview.wss?uid=swg22014276","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1041767","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1420"},{"url":"https://github.com/advisories/GHSA-xxr9-6j7m-9mvq"}],"sources":{"cve":[{"id":"CVE-2018-1420","description":"IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.","status":"published","published":"2018-10-01T15:00:00Z","modified":"2024-09-16T17:47:39.664Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:08.701206Z"}],"euvd":[{"id":"EUVD-2018-11999","description":"IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.","status":"published","published":"2018-10-01T15:00:00Z","modified":"2024-09-16T17:47:39Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:55:39.247967Z"}],"ghsa":[{"id":"GHSA-xxr9-6j7m-9mvq","title":"IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box...","description":"IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.","status":"published","published":"2022-05-13T01:33:19Z","modified":"2023-02-01T05:08:33Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:50:47.846536Z"}],"nvd":[{"id":"CVE-2018-1420","description":"IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.","status":"published","published":"2018-10-01T14:29:00.313Z","modified":"2026-06-17T01:51:11.523Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:04:42.52179Z"}]}}