{
  "Name": "IBM WebSphere Application Server Deserialization RCE (CVE-2020-4450)",
  "Description": "IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects. IBM X-Force ID: 181231.",
  "Product": "IBM WebSphere Application Server",
  "Homepage": "https://www.ibm.com/cloud/websphere-application-platform/",
  "DisclosureDate": "2020-06-05",
  "Author": "gobysec@gmail.com",
  "FofaQuery": "(protocol=\"corbaloc\" && banner=\"WebSphere\") || app=\"IBM-WebSphere\"",
  "Level": "3",
  "Impact": "",
  "Recommandation": "",
  "References": [
    "https://exchange.xforce.ibmcloud.com/vulnerabilities/181231",
    "https://www.ibm.com/support/pages/node/6220294",
    "https://www.zerodayinitiative.com/advisories/ZDI-20-689/",
    "https://nvd.nist.gov/vuln/detail/CVE-2020-4450",
    "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4450"
  ],
  "HasExp": false,
  "ExpParams": null,
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": null,
  "ExploitSteps": null,
  "Tags": ["rce"],
  "CVEIDs": [
    "CVE-2020-4450"
  ],
  "CVSSScore": "9.8",
  "AttackSurfaces": {
    "Application": null,
    "Support": null,
    "Service": ["IBM-WebSphere"],
    "System": null,
    "Hardware": null
  }
}