Description
IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21883573
- 74439 vdb-entry
- 1032249 vdb-entry
- PI38302 vendor-advisory