The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2010-12-30 21:00
Updated : 2024-02-28 11:41
NVD link : CVE-2010-3708
Mitre link : CVE-2010-3708
CVE.ORG link : CVE-2010-3708
JSON object : View
Products Affected
redhat
- jboss_enterprise_soa_platform
- jboss_enterprise_application_platform
CWE
CWE-20
Improper Input Validation