CVE-2018-1904: Critical severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an administrative client class with a serialized object from untrusted sources. IBM X-Force ID: 152533.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1904?
CVE-2018-1904 is classified as a high severity vulnerability that allows remote code execution.
How do I fix CVE-2018-1904?
To mitigate CVE-2018-1904, update your IBM WebSphere Application Server to a version that is not affected, specifically above 7.0.0.45, 8.0.0.15, 8.5.5.14, or 9.0.0.9.
Who is affected by CVE-2018-1904?
CVE-2018-1904 affects IBM WebSphere Application Server versions 7.0 to 9.0 before the specified fixed versions.
What attack vector does CVE-2018-1904 utilize?
CVE-2018-1904 can be exploited by remote attackers through an administrative client class using a serialized object from untrusted sources.
Is CVE-2018-1904 easy to exploit?
CVE-2018-1904 is considered to be relatively easy to exploit, increasing the urgency for affected users to apply the necessary updates.