Описание
A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.
A flaw was found in Wildfly. A remote deserialization attack is possible in the Enterprise Application Beans (EJB) due to lack of validation/filtering capabilities in wildfly. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availablity.
Меры по смягчению последствий
There is currently no known mitigation for this issue.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Data Grid 8 | wildfly | Not affected | ||
| Red Hat Decision Manager 7 | wildfly | Not affected | ||
| Red Hat JBoss Data Grid 7 | wildfly | Not affected | ||
| Red Hat JBoss Data Virtualization 6 | jbossas | Out of support scope | ||
| Red Hat JBoss Data Virtualization 6 | wildfly | Out of support scope | ||
| Red Hat JBoss Enterprise Application Platform 5 | jbossas | Out of support scope | ||
| Red Hat JBoss Enterprise Application Platform 6 | jbossas | Out of support scope | ||
| Red Hat JBoss Fuse 6 | wildfly | Fix deferred | ||
| Red Hat JBoss Operations Network 3 | wildfly | Out of support scope | ||
| Red Hat JBoss SOA Platform 5 | jbossas | Out of support scope |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.
A vulnerability was found in Wildfly in versions before 20.0.0.Final, ...
EPSS
7.5 High
CVSS3