critical9.8Public exploit code
CVE-2019-4279
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of seriali…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Websphere Application Server - Network Deployment Untrusted Data Deserialization Remote Code Execution (Metasploit)2019-06-05 · remote · windows · Verified
Impact
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 160445.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | from 8.5.0.0 through 8.5.5.15 from 9.0.0.0 through 9.0.0.11 Version 7.0.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/108450
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160445
- https://www.ibm.com/support/docview.wss?uid=ibm10883628
- http://www.securityfocus.com/bid/108450
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160445
- https://www.ibm.com/support/docview.wss?uid=ibm10883628