PH25216:IBM WebSphere Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2020-4448 CVSS Score 9.8)

Download

Downloadable File

File link	File size	File description

Abstract

IBM WebSphere Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2020-4448)

For WebSphere Virtual Enterprise version 8.0.0.15, apply 7.0.0.1-WS-WVECommon-IFPH25216.
For WebSphere Virtual Enterprise version 7.0.0.45, apply 7.0.0.0-WS-WVEWAS7-IFPH25216.

Download Description

PH25216 resolves the following problem:

ERROR DESCRIPTION:
IBM WebSphere Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2020-4448 CVSS Score 9.8)

LOCAL FIX:

PROBLEM SUMMARY:
IBM WebSphere Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2020-4448 CVSS Score 9.8)

PROBLEM CONCLUSION:
IBM WebSphere Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2020-4448 CVSS Score 9.8)

Prerequisites

None

Installation Instructions

Review the readme.txt for detailed installation instructions.

URL	SIZE(Bytes)
V90 Readme	2405
V85 Readme	2509

Download Package

DOWNLOAD	RELEASE DATE	SIZE(Bytes)	DOWNLOAD Options What is Fix Central(FC)?
8.5.5.0-WS-WASND-IFPH25216	04 June 2020	886446	FC
9.0.0.0-WS-WASND-IFPH25216	04 June 2020	883312	FC
7.0.0.1-WS-WVECommon-IFPH25216 (For WebSphere Virtual Enterprise version 8.0.0.15)	04 June 2020	748916	FC
7.0.0.0-WS-WVEWAS7-IFPH25216 (For WebSphere Virtual Enterprise version 7.0.0.45)	04 June 2020	595126	FC

Problems Solved

PH25216 includes PH01352

Change History

6/8/2020 - "Problem Solved" section has been updated. From PH01352 to "PH25216 includes PH01352" . "Problems (APARS) fixed" section is cleared.

Technical Support

Contact IBM Support at https://www.ibm.com/software/mysupport/s/ or 1-800-IBM-SERV (US only).

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Component":"General","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"9.0.0.9;8.5.5.16;8.5.5.15;8.5.5.14;8.5.5.13;8.5.5.12;8.5.5.11;8.5.5.10;8.5.5.9;9.0.0.8;9.0.0.7;9.0.0.6;9.0.0.5;9.0.0.4;9.0.0.3;9.0.0.2;9.0.0.1;9.0.0.0;8.5.5.17;9.0.5.3;9.0.5.2;9.0.5.1;9.0.5.0;9.0.0.11;9.0.0.10;8.5.5.8;8.5.5.7;8.5.5.6;8.5.5.5;8.5.5.4;8.5.5.3;8.5.5.2;8.5.5.1;8.5.5","Edition":"Network Deployment","Line of Business":{"code":"LOB45","label":"Automation"}}]

Tips