Deserialization Vulnerability in Red Hat JBoss EAP
CVE-2016-9585

5.3MEDIUM

Key Information:

Vendor
Red Hat
Status
Vendor
CVE Published:
9 March 2018

Summary

Red Hat JBoss EAP version 5 has a vulnerability in its JMX endpoint, where it improperly handles the deserialization of untrusted data. This flaw allows an attacker to manipulate the serialized credentials, potentially leading to a denial of service. Attackers could exploit this weakness to disrupt service availability, impacting businesses reliant on this software. It is critical for users of JBoss EAP 5 to review their security posture and take necessary actions to mitigate this risk.

Affected Version(s)

EAP-5 EAP-5

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.