CVE-2016-5062

2016-09-2910:00:00

certcc

www.cve.org

10 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

JSON

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

References

www.kb.cert.org/vuls/id/706359

www.securityfocus.com/bid/93208