IBM WebSphere Application Server Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in IBM WebSphere Application Server versions 9.0 and 8.5. This vulnerability arises from a bypass of security controls, allowing unauthorized execution of code on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected server.

Remediation

Users are advised to upgrade to IBM WebSphere Application Server Fix Pack 9.0.5.29 or later, or Fix Pack 8.5.5.30 or later. Alternatively, apply the Interim Fix that resolves APAR PH71453. Additional interim fixes may be available and linked off the interim fix download page.