CVE-2022-40609

Description

IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.

Reserved 2022-09-12 | Published 2023-08-02 | Updated 2024-10-17 | Assigner ibm

Problem types

CWE-502 Deserialization of Untrusted Data

Product status

Default status
unaffected

7.1.5.18, 8.0.8.0
affected

References

www.ibm.com/support/pages/node/7017032 vendor-advisory

exchange.xforce.ibmcloud.com/vulnerabilities/236069 vdb-entry

cve.org (CVE-2022-40609)

nvd.nist.gov (CVE-2022-40609)

Download JSON