[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248038

 
 

909

 
 

194772

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Privilege escalation vulnerability in IBM WebSphere Application Server - CVE-2020-4362 (linux)

ID: oval:org.secpod.oval:def:64108Date: (C)2020-07-08   (M)2022-10-10
Class: VULNERABILITYFamily: unix




The host is installed with WebSphere Application Server Network Deployment 9.x through 9.0.5.4, 8.5.x through 8.5.5.17, 8.0.x through 8.0.0.15 or 7.0.x through 7.0.0.45 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to handle an issue when using token-based authentication in an admin request over the SOAP connector. Successful exploitation allows an authenticated attacker to gain elevated privileges.

Platform:
Linux
Product:
IBM WebSphere Application Server Network Deployment 7.0
IBM WebSphere Application Server Network Deployment 8.0
IBM WebSphere Application Server Network Deployment 9.0
IBM WebSphere Application Server Network Deployment 8.5
Reference:
CVE-2020-4362
CVE    1
CVE-2020-4362

© SecPod Technologies