E15-6qs01
CVSS:
9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
3
Year:
2015
Description
This strike exploits a Java Unserialization vulnerability in JBoss application server.
The vulnerability is due to unsafe unserialization of java objects, including from untrusted sources
By enticing a user to visit a malicious web page, arbitrary command can be executed on the client system.
CVE
References
http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/#jboss