Demonstrating CVE-2020-4449: Information Disclosure Bug in IBM WebSphere
Channel: Zero Day Initiative
Date: 2020-07-21

This video demonstrates how an unauthenticated attacker could perform an information disclosure attack on affected versions of the IBM WebSphere application server. A flaw exists within the handling of the IIOP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data.

For full details on the bug, see the blog published at:
https://www.zerodayinitiative.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere