JBOSS EAP/AS 6.x Remote Code Execution

Discussion in 'News Aggregator' started by Packet Storm, 13 Jul 2022.

  1. Packet Storm

    Packet Storm Guest

    An unauthenticated attacker with network access to the JBOSS EAP/AS versions 6.x and below Remoting Unified Invoker interface can send a serialized object to the interface to execute code on vulnerable hosts.

    Continue reading...
     

Share This Page

Loading...