IBM WebSphere Application Server Community Edition Serialized Object Handling Vulnerability

Last Update Date: 10 Jul 2013 12:43 Release Date: 10 Jul 2013 3976 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

A vulnerability has been identified in IBM WebSphere Application Server Community Edition, which can be exploited by malicious people to compromise a vulnerable system.

The application bundles a vulnerable version of Geronimo.

Impact

Remote Code Execution

System / Technologies affected

IBM WebSphere Application Server Community Edition 3.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 3.0.0.4 or apply patch

Vulnerability Identifier

CVE-2013-1777

Source

Secunia
IBM