IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
References
Link | Resource |
---|---|
https://www-01.ibm.com/support/docview.wss?uid=swg21990060 | Patch Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 | Broken Link |
http://www.securityfocus.com/bid/93162 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2016-10-05 03:59
Updated : 2016-11-28 12:30
NVD link : CVE-2016-5983
Mitre link : CVE-2016-5983
JSON object : View
CWE
CWE-284
Improper Access Control
Products Affected
ibm
- websphere_application_server