IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_application_server | 9.0 | 9.0.x |
| ibm / websphere_application_server | 8.0 | 8.0.x |
| ibm / websphere_application_server | 8.5.5 | 8.5.5.x |
| ibm / websphere_application_server | 8.5 | 8.5.x |