Rewterz
Rewterz Threat Alert – Try2Cry Ransomware – IOCs
July 18, 2020
Rewterz
Rewterz Threat Alert – Trickbot – IOCs
July 20, 2020

Rewterz Threat Advisory – CVE-2020-4464 – IBM WebSphere Application Server code execution

Severity

High

Analysis Summary

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a specially-crafted sequence of serialized objects over the SOAP connector.

Impact

  • Gain Access
  • Execute arbitrary code

Affected Vendors

IBM

Affected Products

  • IBM WebSphere Application Server 7.0
  • IBM WebSphere Application Server 8.0
  • IBM WebSphere Application Server 8.5
  • IBM WebSphere Application Server 9.0

Remediation

Refer to IBM Security Bulletin 6250059 for patch, upgrade or suggested workaround information.