Security Advisory

CVE-2016-6330

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-09-27 15:00:00
Last updated 2024-08-06 01:29:18
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3737.