Security Advisory

CVE-2011-2092

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-06-16 23:00:00

Last updated 2024-08-06 22:46:00

Assigner adobe

CVSS score not scored

State PUBLISHED

Description

Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability."

← Browse all CVEs View on cve.org ↗