Description
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | WebSphere Application Server | 8.5, 9.0 | — |
Advisories 1
- WID-SEC-2024-1550 IBM WebSphere Application Server: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · Nov 3, 2024
References
- https://www.ibm.com/support/pages/node/7159825 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/292641 vdb-entry