IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 | Broken Link |
http://www.securityfocus.com/bid/93162 | |
https://www-01.ibm.com/support/docview.wss?uid=swg21990060 | Patch Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 | Broken Link |
http://www.securityfocus.com/bid/93162 | |
https://www-01.ibm.com/support/docview.wss?uid=swg21990060 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 02:55
Type | Values Removed | Values Added |
---|---|---|
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 - Broken Link | |
References | () http://www.securityfocus.com/bid/93162 - | |
References | () https://www-01.ibm.com/support/docview.wss?uid=swg21990060 - Patch, Vendor Advisory |
Information
Published : 2016-10-05 10:59
Updated : 2024-11-21 02:55
NVD link : CVE-2016-5983
Mitre link : CVE-2016-5983
CVE.ORG link : CVE-2016-5983
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE
CWE-284
Improper Access Control