high8.8Public exploit code
CVE-2016-7065
The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly exec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Red Hat JBoss EAP - Deserialization of Untrusted Data2016-11-28 · webapps · java · Verified
Impact
The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Jboss Enterprise Application Platform | Versions 4.0.0, 5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2016/Nov/143
- http://www.securityfocus.com/bid/93462
- https://bugzilla.redhat.com/show_bug.cgi?id=1382534
- https://www.exploit-db.com/exploits/40842/
- http://seclists.org/fulldisclosure/2016/Nov/143
- http://www.securityfocus.com/bid/93462
- https://bugzilla.redhat.com/show_bug.cgi?id=1382534
- https://www.exploit-db.com/exploits/40842/