CVE-2016-6330 in JBoss Operations Networkinfo

Summary

The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3737.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

07/26/2016

Disclosure

09/27/2016

CPE

ready

CVSS

9.8

EPSS

0.13005

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!