CVE-2020-4589: Critical severity ibm websphere application server feature pack for web services vulnerability
Published Aug 13, 2020
·Updated
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 184585.
Affected Software
4 affected components
IBM WebSphere Application Server Feature Pack for Web Services>=7.0.0.0<=7.0.0.45
IBM WebSphere Application Server Feature Pack for Web Services>=8.0.0.0<=8.0.0.15
IBM WebSphere Application Server Feature Pack for Web Services>=8.5.0.0<=8.5.5.17
IBM WebSphere Application Server Feature Pack for Web Services>=9.0.0.0<=9.0.5.4
Event History
Aug 13, 2020
CVE Published
via MITRE·11:50 AM
Data Sourced
via MITRE·11:50 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-4589?
The severity of CVE-2020-4589 is critical with a severity value of 9.8.
2
How does CVE-2020-4589 affect IBM WebSphere Application Server?
CVE-2020-4589 affects IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0.
3
How can a remote attacker exploit CVE-2020-4589?
A remote attacker can exploit CVE-2020-4589 by sending a specially-crafted sequence of serialized objects from untrusted sources.
4
Is there a fix available for CVE-2020-4589?
Yes, IBM has provided a fix for CVE-2020-4589. Please refer to the IBM support page for more information.
5
Where can I find more information about CVE-2020-4589?
You can find more information about CVE-2020-4589 on the IBM X-Force ID page or the IBM support page.