Java Deserialization Vulnerability in IBM Websphere MQ

CVE-2016-0360

What is CVE-2016-0360?

IBM Websphere MQ clients across several versions are susceptible to a vulnerability that allows the deserialization of objects from untrusted sources. This flaw could lead to unauthorized execution of arbitrary Java code when a malicious user exploits the defect by adding specific classes to the application classpath. It poses a risk to the integrity and confidentiality of the application and its data. For more details, refer to IBM's official documentation and related security disclosures.

References