Red Hat JBoss Application Server Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/12/2021. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| jboss enterprise application platform | = 5.0.0= 5.0.1= 5.1.0= 5.1.1= 5.1.2= 5.2.0= 5.2.1= 5.2.2 |
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free