Description (CNA)
The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Artemis in EAP 7 | affected 7.3.9.GA, 7.4.0.GA |
CWE
CWE-502
References
ADP enrichment
No English description supplied.