CVE-2018-1567: Critical severity ibm websphere application server feature pack for web services vulnerability
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through the SOAP connector with a serialized object from untrusted sources. IBM X-Force ID: 143024.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1567?
CVE-2018-1567 is considered a high severity vulnerability due to its ability to allow remote code execution.
How do I fix CVE-2018-1567?
To fix CVE-2018-1567, IBM recommends upgrading to the latest version of the WebSphere Application Server that includes security patches.
What versions of IBM WebSphere Application Server are affected by CVE-2018-1567?
CVE-2018-1567 affects IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 up to specified patch levels.
What type of attack does CVE-2018-1567 allow?
CVE-2018-1567 allows remote attackers to execute arbitrary Java code through the SOAP connector using serialized objects from untrusted sources.
Is CVE-2018-1567 easy to exploit?
Yes, CVE-2018-1567 can be relatively easy to exploit if the application is configured to accept serialized objects from untrusted sources.