CVE-2017-1151

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-20 · updated 2026-06-17

Description

IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.

Affected products

IBM WebSphere Application Server: 8.0, 8.5, 8.5.5, 9.0

References

http://www.ibm.com/support/docview.wss?uid=swg21999293
http://www.securityfocus.com/bid/96841
http://www.securitytracker.com/id/1037984
http://www.ibm.com/support/docview.wss?uid=swg21999293
http://www.securityfocus.com/bid/96841
http://www.securitytracker.com/id/1037984

Get alerted when CVE-2017-1151 or the next vulnerability affects your stack