Security Advisory

CVE-2016-0779

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-11 16:00:00
Last updated 2024-08-05 22:30:04
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object.