CVE-2016-5062

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.
References
Link Resource
http://www.kb.cert.org/vuls/id/706359 Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/93208
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:aternity:aternity:*:*:*:*:*:*:*:*

Information

Published : 2016-09-29 03:59

Updated : 2017-04-09 18:59


NVD link : CVE-2016-5062

Mitre link : CVE-2016-5062


JSON object : View

CWE
CWE-669

Incorrect Resource Transfer Between Spheres

Advertisement

dedicated server usa

Products Affected

aternity

  • aternity