RCE in IBM Websphere Application Server
CVE-2014-4767
IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.027 (84.4th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_application_server — versions 8.5.0.0, 8.5.0.1, 8.5.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)