Summary

Certain versions of IBM Operational Decision Manager allow a remote unauthenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. This post acts a complete hands-on guide to understand and exploit this deserialization vulnerability without any prior experience with such vulnerabilities. The complete process right from the very start is shown to make is easy to follow for even the beginner audience!

Description