{"id":11200,"date":"2020-08-25T00:50:31","date_gmt":"2020-08-25T00:50:31","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=11200"},"modified":"2026-04-17T18:07:48","modified_gmt":"2026-04-17T18:07:48","slug":"websphere-application-server-high-risk-remote-code-execution-vulnerability-cve-2020-4450-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/websphere-application-server-high-risk-remote-code-execution-vulnerability-cve-2020-4450-threat-alert\/","title":{"rendered":"WebSphere Application Server High-Risk Remote Code Execution Vulnerability (CVE-2020-4450) Threat Alert"},"content":{"rendered":"\n

Overview<\/h2>\n\n\n\n

On June 5, Beijing time, IBM released a security bulletin to announce the fix of a high-risk remote code execution vulnerability (CVE-2020-4450) in WebSphere Application Server (WAS). This vulnerability was caused by deserialization of the Internet Inter-ORB Protocol (IIOP). It is assigned the CVSS base score of 9.8 and therefore is a high-risk one with an extensive impact.<\/p>\n\n\n\n\n\n\n\n

The NSFOCUS security research team reported CVE-2020-4450 to IBM. An unauthenticated attacker could remotely target the WAS server via the IIOP protocol to execute code on the target server and gain system privileges, thereby taking control of the server.<\/p>\n\n\n\n

A successful exploit is illustrated as follows:<\/p>\n\n\n\n

\"Red<\/figure><\/div>\n\n\n\n

Since detailed analysis of the vulnerability has been available recently and the vulnerability has a great impact, affected users are advised to take preventive measures as soon as possible.<\/p>\n\n\n\n

Reference link:<\/p>\n\n\n\n

\nhttps:\/\/www.ibm.com\/support\/pages\/node\/6220276\n<\/div><\/figure>\n\n\n\n

Affected Versions<\/strong><\/h2>\n\n\n\n