IBM WebSphere Application Server SAML Component Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in IBM WebSphere Application Server versions 9.0 and 8.5. This issue arises from improper validation of user-supplied data during deserialization in the SAML Web Single Sign-On component. Exploitation of this vulnerability requires a crafted HTTP request that, when combined with a suitable gadget chain, could lead to unauthorized code execution on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected server.

Remediation

Users are advised to upgrade to IBM WebSphere Application Server Fix Pack 9.0.5.29 or later, or Fix Pack 8.5.5.30 or later. Interim fixes resolving this vulnerability are also available and can be downloaded from the IBM Support portal.