Beveiligingsadvies

CVE-2021-3160

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-28 19:37:46

Laatst bijgewerkt 2024-08-03 16:45:51

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server.

← Alle CVE's bekijken Bekijk op cve.org ↗