CVE-2016-5062

9.8CRITICAL

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

发布于: 9/29/2016更新于: 4/12/2025
在NVD查看在MITRE查看

描述

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

AI分析AI驱动

受影响产品

aternityaternity

参考资料