Vulnerability CVE-2024-35154


Published: 2024-07-09   Modified: 2024-07-10

Description:
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.

Type:

CWE-250

(Execution with Unnecessary Privileges)

 References:
https://www.ibm.com/support/pages/node/7159825
https://exchange.xforce.ibmcloud.com/vulnerabilities/292641

Copyright 2024, cxsecurity.com

 

Back to Top