critical9.8
CVE-2016-3690
The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.
Impact
The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Jboss Enterprise Application Platform | Versions 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.1.1, 5.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99079
- https://access.redhat.com/solutions/178393
- https://access.redhat.com/solutions/45530
- https://bugzilla.redhat.com/show_bug.cgi?id=1327037
- http://www.securityfocus.com/bid/99079
- https://access.redhat.com/solutions/178393
- https://access.redhat.com/solutions/45530
- https://bugzilla.redhat.com/show_bug.cgi?id=1327037