CVE-2013-2165

First published: Wed Jun 12 2013(Updated: )

A flaw was found in the way JBoss RichFaces handled deserialization. A remote attacker could use this flaw to trigger the execution of the deserialization methods in any serializable class deployed on the server. This could lead to a variety of security impacts depending on the deserialization logic of these classes.

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/first-publish-date
• agent/softwarecombine
• agent/references
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/author
• agent/last-modified-date
• agent/weakness
• agent/tags
• agent/description
• agent/event
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2013-2165
• vendor/redhat
• canonical/redhat jboss enterprise application platform
• version/redhat jboss enterprise application platform/4.3.0
• version/redhat jboss enterprise application platform/4.3.0-cp10
• version/redhat jboss enterprise application platform/5.0.0
• version/redhat jboss enterprise application platform/5.0.1
• version/redhat jboss enterprise application platform/5.1.0
• version/redhat jboss enterprise application platform/5.1.1
• version/redhat jboss enterprise application platform/5.1.2
• version/redhat jboss enterprise application platform/5.2.0
• canonical/redhat jboss enterprise brms platform
• version/redhat jboss enterprise brms platform/5.0.0
• version/redhat jboss enterprise brms platform/5.0.1
• version/redhat jboss enterprise brms platform/5.0.2
• version/redhat jboss enterprise brms platform/5.1.0
• version/redhat jboss enterprise brms platform/5.2.0
• version/redhat jboss enterprise brms platform/5.3.0
• version/redhat jboss enterprise brms platform/5.3.1
• canonical/redhat jboss enterprise portal platform
• version/redhat jboss enterprise portal platform/4.3.0-cp03
• version/redhat jboss enterprise portal platform/4.3.0-cp04
• version/redhat jboss enterprise portal platform/4.3.0-cp05
• version/redhat jboss enterprise portal platform/4.3.0-cp06
• version/redhat jboss enterprise portal platform/4.3.0-cp07
• version/redhat jboss enterprise portal platform/5.0.0
• version/redhat jboss enterprise portal platform/5.0.1
• version/redhat jboss enterprise portal platform/5.1.0
• version/redhat jboss enterprise portal platform/5.1.1
• version/redhat jboss enterprise portal platform/5.2.0
• version/redhat jboss enterprise portal platform/5.2.1
• version/redhat jboss enterprise portal platform/5.2.2
• canonical/redhat jboss enterprise soa platform
• version/redhat jboss enterprise soa platform/4.2.0
• version/redhat jboss enterprise soa platform/4.2.0-cp01
• version/redhat jboss enterprise soa platform/4.2.0-cp02
• version/redhat jboss enterprise soa platform/4.2.0-cp03
• version/redhat jboss enterprise soa platform/4.2.0-cp04
• version/redhat jboss enterprise soa platform/4.2.0-cp05
• version/redhat jboss enterprise soa platform/4.2.0-tp02
• version/redhat jboss enterprise soa platform/4.3.0
• version/redhat jboss enterprise soa platform/4.3.0-cp01
• version/redhat jboss enterprise soa platform/4.3.0-cp02
• version/redhat jboss enterprise soa platform/4.3.0-cp03
• version/redhat jboss enterprise soa platform/4.3.0-cp04
• version/redhat jboss enterprise soa platform/4.3.0-cp05
• version/redhat jboss enterprise soa platform/5.0.0
• version/redhat jboss enterprise soa platform/5.0.1
• version/redhat jboss enterprise soa platform/5.0.2
• version/redhat jboss enterprise soa platform/5.1.0
• version/redhat jboss enterprise soa platform/5.1.1
• version/redhat jboss enterprise soa platform/5.2.0
• version/redhat jboss enterprise soa platform/5.3.0
• version/redhat jboss enterprise soa platform/5.3.1
• canonical/redhat jboss enterprise web platform
• version/redhat jboss enterprise web platform/5.1.0
• version/redhat jboss enterprise web platform/5.1.1
• version/redhat jboss enterprise web platform/5.1.2
• version/redhat jboss enterprise web platform/5.2.0
• canonical/redhat jboss operations network
• version/redhat jboss operations network/1.0.0
• version/redhat jboss operations network/2.0.0
• version/redhat jboss operations network/2.0.1
• version/redhat jboss operations network/2.1.0
• version/redhat jboss operations network/2.2
• version/redhat jboss operations network/2.3
• version/redhat jboss operations network/2.3.1
• version/redhat jboss operations network/2.4
• version/redhat jboss operations network/2.4.1
• version/redhat jboss operations network/2.4.2
• version/redhat jboss operations network/3.0
• version/redhat jboss operations network/3.0.1
• version/redhat jboss operations network/3.1
• version/redhat jboss operations network/3.1.1
• version/redhat jboss operations network/3.1.2
• canonical/redhat jboss web framework kit
• version/redhat jboss web framework kit/2.2.0
• version/redhat jboss web framework kit/1.0.0
• version/redhat jboss web framework kit/1.1.0
• version/redhat jboss web framework kit/1.2.0
• version/redhat jboss web framework kit/2.0.0
• version/redhat jboss web framework kit/2.1.0
• canonical/redhat richfaces
• version/redhat richfaces/3.1.0
• version/redhat richfaces/3.1.1
• version/redhat richfaces/3.1.2
• version/redhat richfaces/3.1.3
• version/redhat richfaces/3.1.4
• version/redhat richfaces/3.1.5
• version/redhat richfaces/3.1.6
• version/redhat richfaces/3.2.0
• version/redhat richfaces/3.2.0-sr1
• version/redhat richfaces/3.2.1
• version/redhat richfaces/3.2.2
• version/redhat richfaces/3.3.0
• version/redhat richfaces/3.3.1
• version/redhat richfaces/3.3.2
• version/redhat richfaces/3.3.2-sr1
• version/redhat richfaces/3.3.3
• version/redhat richfaces/4.0.0
• version/redhat richfaces/4.1.0
• version/redhat richfaces/4.2.0
• version/redhat richfaces/4.2.1
• version/redhat richfaces/4.2.2
• version/redhat richfaces/4.2.3
• version/redhat richfaces/4.3.0
• version/redhat richfaces/4.3.1
• version/redhat richfaces/4.5.0-alpha1
• version/redhat richfaces/5.0.0-alpha1