CVE-2017-12149

KEV · Ransomware

Red Hat JBoss Application Server Remote Code Execution Vulnerability

Vendor / Project: Red Hat
Product: JBoss Application Server
Date added: Dec 10, 2021
Due date: Jun 10, 2022
Known ransomware use: Known
CWEs: CWE-502

Description

The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-12149