PT-2019-17012 · Ibm · Ibm Websphere Application Server

CVE-2019-4279

·

Published

2019-05-17

·

Updated

2023-02-03

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 through 9.0
Description The issue allows a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources.
Recommendations For IBM WebSphere Application Server versions 8.5 through 9.0, update to a version that includes a fix for this issue to prevent remote code execution.

Exploit

Fix

DoS

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2019-4279

Affected Products

Ibm Websphere Application Server