Deserialization Vulnerability in Red Hat JBoss EAP
CVE-2016-9585
5.3MEDIUM
Summary
Red Hat JBoss EAP version 5 has a vulnerability in its JMX endpoint, where it improperly handles the deserialization of untrusted data. This flaw allows an attacker to manipulate the serialized credentials, potentially leading to a denial of service. Attackers could exploit this weakness to disrupt service availability, impacting businesses reliant on this software. It is critical for users of JBoss EAP 5 to review their security posture and take necessary actions to mitigate this risk.
Affected Version(s)
EAP-5 EAP-5
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved