Beveiligingsadvies

CVE-2013-1768

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-07-11 22:00:00

Laatst bijgewerkt 2024-08-06 15:13:32

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.

← Alle CVE's bekijken Bekijk op cve.org ↗