Description

The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.

Remediation

References

http://rhn.redhat.com/errata/RHSA-2016-1519.html

http://www.securitytracker.com/id/1036507

https://bugzilla.redhat.com/show_bug.cgi?id=1333618

https://www.tenable.com/security/research/tra-2016-22

Related Vulnerabilities

CVE-2020-7020 Vulnerability in maven package org.elasticsearch:elasticsearch

CVE-2022-22968 Vulnerability in maven package org.springframework:spring-context

CVE-2010-3863 Vulnerability in maven package org.apache.shiro:shiro-all

CVE-2019-10369 Vulnerability in maven package org.jenkins-ci.plugins:jclouds-jenkins

CVE-2022-34200 Vulnerability in maven package com.convertigo.jenkins.plugins:convertigo-mobile-platform

Severity

Critical

Classification

CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Vendor Advisory Issue Tracking