CVE-2016-0360 IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicious user to execute arbitrary Java code by adding v...
CriticalCVSS 9.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicious user to execute arbitrary Java code by adding vulnerable classes to the classpath. IBM Reference #: 1983457.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere mq jms | = 7.0.1 | No fix listed |
| ibm websphere mq jms | = 7.1 | No fix listed |
| ibm websphere mq jms | = 7.5 | No fix listed |
| ibm websphere mq jms | = 8.0 | No fix listed |
| ibm websphere mq jms | = 9.0 | No fix listed |
| ibm websphere mq | = 7.0.1 | No fix listed |
| ibm websphere mq | = 7.1 | No fix listed |
| ibm websphere mq | = 7.5 | No fix listed |
| ibm websphere mq | = 8.0 | No fix listed |
| ibm websphere mq | = 9.0 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- 95317 third-party-advisory vdb-entry
- 1037561 vdb-entry