mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
158 lines
7.0 KiB
JSON
158 lines
7.0 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2016-4978",
|
|
"ASSIGNER": "secalert@redhat.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "n/a",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:3454",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:3454"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:3455",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:3455"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:3456",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:3456"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:3458",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:3458"
|
|
},
|
|
{
|
|
"url": "http://mail-archives.apache.org/mod_mbox/activemq-users/201609.mbox/%3CCAH6wpnqzeNtpykT7emtDU1-GV7AvjFP5-YroWcCC4UZyQEFvtA%40mail.gmail.com%3E",
|
|
"refsource": "MISC",
|
|
"name": "http://mail-archives.apache.org/mod_mbox/activemq-users/201609.mbox/%3CCAH6wpnqzeNtpykT7emtDU1-GV7AvjFP5-YroWcCC4UZyQEFvtA%40mail.gmail.com%3E"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/93142",
|
|
"refsource": "MISC",
|
|
"name": "http://www.securityfocus.com/bid/93142"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:1834",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:1834"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:1835",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:1835"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:1836",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:1836"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2017:1837",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2017:1837"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1447",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2018:1447"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1448",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2018:1448"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1449",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2018:1449"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1450",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2018:1450"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1451",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2018:1451"
|
|
},
|
|
{
|
|
"url": "https://lists.apache.org/thread.html/7260bd0955c12aac5bd892039d3356ba3aa0ff4caaf2aa4fd4fe84a2%40%3Cissues.activemq.apache.org%3E",
|
|
"refsource": "MISC",
|
|
"name": "https://lists.apache.org/thread.html/7260bd0955c12aac5bd892039d3356ba3aa0ff4caaf2aa4fd4fe84a2%40%3Cissues.activemq.apache.org%3E"
|
|
},
|
|
{
|
|
"url": "https://lists.apache.org/thread.html/d4ffbc6a43a915324a394b2913ceb7d07bc352f2d08caa19df0aff02%40%3Cissues.activemq.apache.org%3E",
|
|
"refsource": "MISC",
|
|
"name": "https://lists.apache.org/thread.html/d4ffbc6a43a915324a394b2913ceb7d07bc352f2d08caa19df0aff02%40%3Cissues.activemq.apache.org%3E"
|
|
},
|
|
{
|
|
"url": "https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E",
|
|
"refsource": "MISC",
|
|
"name": "https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E"
|
|
},
|
|
{
|
|
"url": "https://lists.apache.org/thread.html/rc96ad63f148f784c84ea7f0a178c84a8985c6afccabbcd9847a82088%40%3Ccommits.activemq.apache.org%3E",
|
|
"refsource": "MISC",
|
|
"name": "https://lists.apache.org/thread.html/rc96ad63f148f784c84ea7f0a178c84a8985c6afccabbcd9847a82088%40%3Ccommits.activemq.apache.org%3E"
|
|
},
|
|
{
|
|
"url": "https://www.blackhat.com/docs/us-16/materials/us-16-Kaiser-Pwning-Your-Java-Messaging-With-Deserialization-Vulnerabilities.pdf",
|
|
"refsource": "MISC",
|
|
"name": "https://www.blackhat.com/docs/us-16/materials/us-16-Kaiser-Pwning-Your-Java-Messaging-With-Deserialization-Vulnerabilities.pdf"
|
|
}
|
|
]
|
|
}
|
|
} |