IBM WebSphere Application Server CVE-2015-1920 Remote Code Execution Vulnerability
BID:74439
Info
IBM WebSphere Application Server CVE-2015-1920 Remote Code Execution Vulnerability
| Bugtraq ID: | 74439 |
| Class: | Unknown |
| CVE: |
CVE-2015-1920 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 30 2015 12:00AM |
| Updated: | Nov 03 2015 08:10PM |
| Credit: | IBM |
| Vulnerable: |
IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 7.0 21 IBM Websphere Application Server 7.0 .9 IBM Websphere Application Server 7.0 .8 IBM Websphere Application Server 7.0 .2 IBM Websphere Application Server 7.0 .13 IBM Websphere Application Server 7.0 .12 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 6.1 41 IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .33 IBM Websphere Application Server 6.1 .32 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .25 IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 8.0.0.1 IBM Websphere Application Server 8.0.0.0 IBM Websphere Application Server 7.0.0.7 IBM Websphere Application Server 7.0.0.6 IBM Websphere Application Server 7.0.0.5 IBM Websphere Application Server 7.0.0.4 IBM Websphere Application Server 7.0.0.23 IBM Websphere Application Server 7.0.0.19 IBM Websphere Application Server 7.0.0.17 IBM Websphere Application Server 7.0.0.15 IBM Websphere Application Server 7.0.0.14 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0.0.0 IBM Websphere Application Server 6.1.0.45 IBM Websphere Application Server 6.1.0.43 IBM Websphere Application Server 6.1.0.39 IBM Websphere Application Server 6.1.0.37 IBM Websphere Application Server 6.1.0.35 IBM Websphere Application Server 6.1.0.34 IBM Websphere Application Server 6.1.0.31 IBM Websphere Application Server 6.1.0.29 IBM Websphere Application Server 6.1.0.27 IBM Tivoli Usage and Accounting Manager (TUAM) 7.3 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 Fix Pack 4 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Monitoring 6.2.3 IBM Tivoli Monitoring 6.2.2 IBM Tivoli Monitoring 6.2.1 IBM Tivoli Access Manager for e-business 6.1.1 |
| Not Vulnerable: | |
Discussion
IBM WebSphere Application Server CVE-2015-1920 Remote Code Execution Vulnerability
IBM WebSphere Application Server is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.
IBM WebSphere Application Server is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.
Exploit / POC
IBM WebSphere Application Server CVE-2015-1920 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM WebSphere Application Server CVE-2015-1920 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM WebSphere Application Server CVE-2015-1920 Remote Code Execution Vulnerability
References:
References:
- IBM Homepage (IBM)
- http://www-01.ibm.com/support/docview.wss?uid=swg21964873 (IBM)
- PI38302;6.1.0: Security Vulnerability in IBM WebSphere Application Server (IBM)
- Security Bulletin: A security vulnerability in IBM WebSphere Application Server (IBM)
- Security Bulletin: IBM Tivoli Monitoring embedded WebSphere Application Server ( (IBM)
- Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (C (IBM)
- Security Bulletin: Security Vulnerability in IBM WebSphere Application Server af (IBM)
- Security Bulletin: Security Vulnerability in IBM WebSphere Application Server af (IBM)
- Security Bulletin: Tivoli Endpoint Manager for Remote Control affected by a secu (IBM)
- Security Bulletin: Tivoli Usage and Accounting Manager / SmartCloud Cost Managem (IBM)
- Security Bulletin: Vulnerability in javax.management API affects IBM License Met (IBM)
- Security Vulnerability in IBM Workload Deployer. (CVE-2015-1920) (IBM)
- swg21967033 : Security Bulletin: Multiple vulnerabilities in IBM Cloud Orchestra ()
- Vulnerability in WebSphere Application Server affects IBM Tivoli System Automati (IBM)
- Vulnerability in WebSphere Application Server affects IBM Tivoli System Automati (IBM)
- Vulnerability reported in WebSphere Application Server management port affects I (IBM)