CVE-2022-40609: IBM SDK, Java Technology Edition code execution
First published: Tue Aug 01 2023(Updated: )
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling Secure Proxy | <=6.0.3 | |
| IBM Sterling Secure Proxy | <=6.1.0 | |
| IBM SDK | <7.1.5.19 | |
| IBM SDK | >=8.0<8.0.8.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2022-40609.
What is the severity of CVE-2022-40609?
The severity of CVE-2022-40609 is critical with a CVSS score of 9.8.
How does CVE-2022-40609 affect IBM SDK, Java Technology Edition?
CVE-2022-40609 affects IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0.
How can a remote attacker exploit CVE-2022-40609?
A remote attacker can exploit CVE-2022-40609 by sending specially-crafted data, allowing them to execute arbitrary code on the system.
What is the recommended solution for CVE-2022-40609?
The recommended solution for CVE-2022-40609 is to apply the necessary patches provided by IBM.
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/type
- agent/weakness
- agent/severity
- agent/title
- agent/description
- agent/first-publish-date
- agent/event
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm sdk
- version/ibm sdk/8.0
- canonical/ibm sterling secure proxy
- version/ibm sterling secure proxy/6.0.3
- version/ibm sterling secure proxy/6.1.0