VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 3, 2020· Updated Jun 17, 2026

CVE-2020-4534

CVE-2020-4534

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of UNC paths. By scheduling a task with a specially-crafted UNC path, an attacker could exploit this vulnerability to execute arbitrary code with higher privileges. IBM X-Force ID: 182808.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • IBM/Websphere Application Serverllm-fuzzy6 versions
    7.0, 8.0, 8.5, and 9.0+ 5 more
    • (no CPE)range: 7.0, 8.0, 8.5, and 9.0
    • (no CPE)range: 7.0
    • cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.