Beveiligingsadvies

CVE-2011-2092

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-06-16 23:00:00
Laatst bijgewerkt 2024-08-06 22:46:00
Toegewezen door adobe
CVSS-score geen score
Status PUBLISHED

Beschrijving

Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability."