NetSight
high7.2

CVE-2020-4163

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file n…

Impact

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file name which would be misinterpreted as jsp content and executed. IBM X-Force ID: 174397.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 7.0.0.0 through 7.0.0.45
from 8.0.0.0 through 8.0.0.15
from 8.5.0.0 through 8.5.5.16
from 9.0.0.0 through 9.0.5.2

References