IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
References
Link | Resource |
---|---|
https://www-01.ibm.com/support/docview.wss?uid=swg21990060 | Patch Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 | Broken Link |
http://www.securityfocus.com/bid/93162 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2016-10-05 10:59
Updated : 2016-11-28 20:30
NVD link : CVE-2016-5983
Mitre link : CVE-2016-5983
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE
CWE-284
Improper Access Control