CVE-2019-16112

TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java object to the recorder/ServiceManager?service=tyler.empire.settings.SettingManager URI.
References
Link Resource
https://www.exploit-db.com/exploits/48462 Exploit Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:tylertech:eagle:2018.3.11:*:*:*:*:*:*:*

Information

Published : 2020-05-13 08:15

Updated : 2020-05-15 06:43


NVD link : CVE-2019-16112

Mitre link : CVE-2019-16112


JSON object : View

CWE
CWE-502

Deserialization of Untrusted Data

Advertisement

dedicated server usa

Products Affected

tylertech

  • eagle