漏洞信息详情

IBM WebSphere Application Server Network Deployment 安全漏洞

  • CNNVD编号:CNNVD-202006-516
  • 危害等级: 超危
  • CVE编号: CVE-2020-4448
  • 漏洞类型: 其他
  • 发布时间: 2020-06-04
  • 威胁类型: 远程
  • 更新时间: 2021-06-04
  • 厂        商:
  • 漏洞来源:

漏洞简介

IBM WebSphere Application Server(WAS)是美国IBM公司的一款应用服务器产品。该产品是JavaEE和Web服务应用程序的平台,也是IBMWebSphere软件平台的基础。

IBM WebSphere Application Server Network Deployment中存在安全漏洞。攻击者可利用该漏洞在系统上执行任意代码。以下产品及版本受到影响:IBM WebSphere Application Server ND 9.0版本,8.5版本;WebSphere Virtual Enterprise 8.0版本,7.0版本。

漏洞公告

目前厂商已发布升级补丁以修复漏洞,补丁获取链接:

https://www.ibm.com/support/pages/node/6220336

参考网址

来源:CONFIRM

链接:https://www.ibm.com/support/pages/node/6220336

来源:MISC

链接:https://www.zerodayinitiative.com/advisories/ZDI-20-688/

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/181228

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-remote-code-execution-vulnerability-in-websphere-application-server-nd-cve-2020-4448/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1971/

来源:www.nsfocus.net

链接:http://www.nsfocus.net/vulndb/46886

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-identity-manager-virtual-appliance-is-affected-by-multiple-vulnerabilities/

来源:www.zerodayinitiative.com

链接:https://www.zerodayinitiative.com/advisories/ZDI-20-688/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2219/

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/WebSphere-AS-Network-Deployment-code-execution-via-Serialized-Objects-32449

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-privileged-identity-manager-is-affected-by-a-code-execution-vulnerability-cve-2020-4448/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-have-been-identified-in-ibm-websphere-application-server-used-by-infosphere-master-data-management-11-6/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-4448

来源:http-server-and-ibm-websphere-application-server-used-in-ibm-websphere-application-server-in-ibm-cloud

链接:http-server-and-ibm-websphere-application-server-used-in-ibm-websphere-application-server-in-ibm-cloud/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-the-ibm-

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2212/

受影响实体

    暂无


漏洞信息快速查询

相关漏洞

更多