IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
References
| Link | Resource |
|---|---|
| https://www-01.ibm.com/support/docview.wss?uid=swg21990060 | Patch Vendor Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 | Broken Link |
| http://www.securityfocus.com/bid/93162 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2016-10-05 10:59
Updated : 2016-11-28 20:30
NVD link : CVE-2016-5983
Mitre link : CVE-2016-5983
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE
CWE-284
Improper Access Control
