PT-2017-7614
CVE-2016-0360
·
تاريخ النشر
2017-02-15
·
تاريخ التحديث
2017-07-27
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Websphere MQ JMS versions 7.0.1, 7.1, 7.5, 8.0, and 9.0
Description
The issue allows a malicious user to execute arbitrary Java code by adding vulnerable classes to the classpath, as the JMS client provides classes that deserialize objects from untrusted sources.
Recommendations
For IBM Websphere MQ JMS version 7.0.1, update to a fixed version to prevent arbitrary Java code execution.
For IBM Websphere MQ JMS version 7.1, update to a fixed version to prevent arbitrary Java code execution.
For IBM Websphere MQ JMS version 7.5, update to a fixed version to prevent arbitrary Java code execution.
For IBM Websphere MQ JMS version 8.0, update to a fixed version to prevent arbitrary Java code execution.
For IBM Websphere MQ JMS version 9.0, update to a fixed version to prevent arbitrary Java code execution.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾