CVE-2018-1736

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 147906.

Link	Resource
https://www.ibm.com/support/docview.wss?uid=ibm10729683	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/147906	VDB Entry Vendor Advisory
http://www.securitytracker.com/id/1041753	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/105490	Third Party Advisory VDB Entry

Configuration 1

cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf01:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf08:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:-:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf004:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf017:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf022:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf06:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf02:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf04:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf005:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf006:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf013:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf020:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:-:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf019:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf05:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf04:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf015:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf11:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf012:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf018:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf016:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf019:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:-:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf07:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf10:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf05:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf009:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf002:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf007:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf03:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf008:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf09:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf014:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf13:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf010:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf021:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf12:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf011:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf023:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf024:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf025:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf026:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf027:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf028:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf029:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf030:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf011:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf012:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf013:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf014:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf015:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf016:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf017:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf018:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf020:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:9.0.0.0:cf14:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:9.0.0.0:cf15:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf03:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf04:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf05:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf06:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf07:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf08:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf09:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf10:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf11:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf12:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf13:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf14:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:cf15:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf14:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf15:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf16:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf17:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf18:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf19:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf20:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf21:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf22:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf23:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf06:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.0.0.0:-:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:8.5.0.0:-:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_portal:9.0.0.0:-:*:*:*:*:*:*

---

Published : 2018-09-27 07:29

Updated : 2019-10-09 11:38

---

NVD link : CVE-2018-1736

Mitre link : CVE-2018-1736

No products.

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')