CVE-2018-1851

IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization. By sending a specially-crafted request to the RP service, an attacker could exploit this vulnerability to execute arbitrary code. IBM X-Force ID: 150999.

• CWE-502

• http://www.securityfocus.com/bid/105839Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/150999VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10735105Patch, Vendor Advisory
• http://www.securityfocus.com/bid/105839Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/150999VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10735105Patch, Vendor Advisory

Published

Oct 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18504A crash and out-of-bounds read can occur when the buffer of …
• CVE-2018-18505An earlier fix for an Inter-process Communication (IPC) vuln…
• CVE-2018-18506When proxy auto-detection is enabled, if a web server serves…5.9
• CVE-2018-18507Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-18508In Network Security Services (NSS) before 3.36.7 and before …6.5
• CVE-2018-18509A flaw during verification of certain S/MIME signatures caus…
• CVE-2018-18510The about:crashcontent and about:crashparent pages can be tr…
• CVE-2018-18511Cross-origin images can be read from a canvas element in vio…
• CVE-2018-18512A use-after-free vulnerability can occur while playing a sou…
• CVE-2018-18513A crash can occur when processing a crafted S/MIME message o…
• CVE-2018-18514Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-18515Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…