Vulnerabilities > CVE-2016-7065 - Deserialization of Untrusted Data vulnerability in Redhat Jboss Enterprise Application Platform 4.0.0/5.0.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Common Weakness Enumeration (CWE)
Exploit-Db
| description | Red Hat JBoss EAP - Deserialization of Untrusted Data. CVE-2016-7065. Webapps exploit for Java platform |
| file | exploits/java/webapps/40842.txt |
| id | EDB-ID:40842 |
| last seen | 2016-11-29 |
| modified | 2016-11-28 |
| platform | java |
| port | 8080 |
| published | 2016-11-28 |
| reporter | Exploit-DB |
| source | https://www.exploit-db.com/download/40842/ |
| title | Red Hat JBoss EAP - Deserialization of Untrusted Data |
| type | webapps |
References
- http://seclists.org/fulldisclosure/2016/Nov/143
- http://seclists.org/fulldisclosure/2016/Nov/143
- http://www.securityfocus.com/bid/93462
- http://www.securityfocus.com/bid/93462
- https://bugzilla.redhat.com/show_bug.cgi?id=1382534
- https://bugzilla.redhat.com/show_bug.cgi?id=1382534
- https://www.exploit-db.com/exploits/40842/
- https://www.exploit-db.com/exploits/40842/