Deserialization of untrusted data

2019-12-1522:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

eDeploy has RCE via cPickle deserialization of untrusted data

CPENameOperatorVersion
jboss_enterprise_web_servereq1.0.0

CPE	Name	Operator	Version
	jboss_enterprise_web_server	eq	1.0.0

References

access.redhat.com/security/cve/cve-2014-3699

bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3699

security-tracker.debian.org/tracker/CVE-2014-3699