CVE-2018-1840

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other than global federated repository and then migrated to a newer release of WebSphere Application Server. IBM X-Force ID: 150813.

• CWE-668

• http://www.securityfocus.com/bid/106141Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/150813VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10735767Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106141Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/150813VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10735767Patch, Vendor Advisory

Published

Dec 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18394Sensitive Information Stored in Clear Text in Moxa ThingsPro…
• CVE-2018-18395Hidden Token Access in Moxa ThingsPro IIoT Gateway and Devic…
• CVE-2018-18396Remote Code Execution in Moxa ThingsPro IIoT Gateway and Dev…
• CVE-2018-18397The userfaultfd implementation in the Linux kernel before 4.…
• CVE-2018-18398Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the I…
• CVE-2018-18399SQL injection vulnerability in the "ContentPlaceHolder1_uxTi…
• CVE-2018-18405jQuery v2.2.2 allows XSS via a crafted onerror attribute of …6.1
• CVE-2018-18406An issue was discovered in Tufin SecureTrack 18.1 with Tufin…
• CVE-2018-18407A heap-based buffer over-read was discovered in the tcprepla…
• CVE-2018-18408A use-after-free was discovered in the tcpbridge binary of T…
• CVE-2018-18409A stack-based buffer over-read exists in setbit() at iptree.…
• CVE-2018-1841IBM Cloud Private 2.1.0 could allow a local user to obtain t…6.2