CVE-2016-7065: High severity jboss enterprise application platform vulnerability
JBoss EAP 4 and 5 JMX servlet is exposed on port 8080/TCP with authentication by default. The communication employs serialized Java objects, encapsulated in HTTP requests and responses.
The server deserializes these objects. This behavior can be exploited to cause a denial of service and potentially execute arbitrary code.
Other sources
The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7065?
CVE-2016-7065 is considered a high severity vulnerability due to the risk of denial of service and potential exploitation through deserialization attacks.
How do I fix CVE-2016-7065?
To mitigate CVE-2016-7065, upgrade to a fixed version of Red Hat JBoss Enterprise Application Platform, specifically versions later than 4.0.0 and 5.0.0.
What versions are affected by CVE-2016-7065?
CVE-2016-7065 affects Red Hat JBoss Enterprise Application Platform versions 4.0.0 and 5.0.0.
What type of attacks can exploit CVE-2016-7065?
CVE-2016-7065 can be exploited to perform denial of service attacks through the deserialization of manipulated Java objects.
Is authentication required to exploit CVE-2016-7065?
CVE-2016-7065 is exposed with authentication by default, but an attacker may still exploit it if they can bypass authentication mechanisms.