cve/2015/CVE-2015-8765.md

CVE-2015-8765

Description

Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

POC

Reference

• https://www.kb.cert.org/vuls/id/576313

Github

• https://github.com/AdeliaNitzsche/Java-Deserialization-Cheat-Sheet
• https://github.com/BrittanyKuhn/javascript-tutorial
• https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
• https://github.com/PalindromeLabs/Java-Deserialization-CVEs
• https://github.com/klausware/Java-Deserialization-Cheat-Sheet
• https://github.com/mishmashclone/GrrrDog-Java-Deserialization-Cheat-Sheet