CVE-2020-4534

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0

Description The issue is caused by improper handling of UNC paths, allowing a local authenticated attacker to gain elevated privileges on the system. An attacker could exploit this by scheduling a task with a specially-crafted UNC path to execute arbitrary code with higher privileges.

Recommendations For IBM WebSphere Application Server versions 7.0 through 9.0, update to a version that properly handles UNC paths to prevent exploitation.