IBM.WAS.NETWK.DEPLOY.Data.Deserialization.Remote.Code.Injection

Description

This indicates an attack attempt to exploit a Command Injection Vulnerability in IBM WebSphere Application Server.
A remote attacker can exploit this vulnerability by sending a message with a crafted recipient or sender. Successful exploitation results in the execution of arbitrary commands as root user.

Affected Products

IBM WebSphere Application Server version 7.0.0.0
IBM WebSphere Application Server version 8.5.0.0 to version 8.5.5.15
IBM WebSphere Application Server version 9.0.0.0 to version 9.0.0.11

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www-01.ibm.com/support/docview.wss?uid=ibm10883628

References