Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMA462597E864AD65DA6656B7C0FA815E09E3D4D6D1AD26999BA801B825EBD63BC
HistoryMar 15, 2021 - 6:36 a.m.

Security Bulletin: IBM Security Privileged Identity Manager is affected by remote code execution (CVE-2020-4450)

2021-03-1506:36:25
www.ibm.com
27

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

Summary

IBM Security Privileged Identity Manager has addressed an issue for WebSphere Application Server which is vulnerable to a Remote Command Execution vulnerability.

Vulnerability Details

CVEID:CVE-2020-4450
**DESCRIPTION:**IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects. IBM X-Force ID: 181231.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/181231 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
ISPIM 2.1.1
ISPIM 2.0.2
ISPIM 2.1.0

Remediation/Fixes

Affected Product(s) Version(s) Remediation
ISPIM 2.1.1 2.1.1-ISS-ISPIM-VA-FP0006
ISPIM 2.1.0 2.1.0-ISS-ISPIM-VA-FP0013
ISPIM 2.0.2 2.0.2-ISS-ISPIM-VA-FP0013
— — —

Workarounds and Mitigations

None

Related

prion 1
ibm 32
zdi 1
cvelist 1
nessus 1
cve 1
githubexploit 1
prion
prion
Code injection
2020-06-05 17:15:00
ibm
ibm
Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2020-4450)
2020-06-30 17:39:45
Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is is vulnerable to a remote code execution vulnerability (CVE-2020-4450)
2020-07-28 06:11:04
Security Bulletin: WebSphere Application Server is vulnerable to a remote code execution vulnerability (CVE-2020-4450)
2020-07-15 20:24:10
zdi
zdi
IBM WebSphere Application Server IIOP Deserialization of Untrusted Data Remote Code Execution Vulnerability
2020-06-05 00:00:00
cvelist
cvelist
CVE-2020-4450
2020-06-04 00:00:00
nessus
nessus
IBM WebSphere Application Server 8.5.x < 8.5.5.18 / 9.0.x < 9.0.5.5 RCE (CVE-2020-4450)
2020-06-12 00:00:00
cve
cve
CVE-2020-4450
2020-06-05 17:15:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Ibm Websphere Application Server
2021-08-17 08:44:49

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON
Related for A462597E864AD65DA6656B7C0FA815E09E3D4D6D1AD26999BA801B825EBD63BC
prion1ibm32zdi1cvelist1nessus1cve1githubexploit1