JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization

The JMS over HTTP Invocation Layer in JBossMQ, as implemented in HTTPServerILServlet.java in JBoss Application Server AS 4.x and earlier, does not properly restrict the classes that can be deserialized from the raw POST body. This allows remote attackers to execute arbitrary code or cause a denia...

cve-2017-12149-playground

许多关键行业（银行业、医疗保健和制造业）仍然依赖专为 JBoss 5 或 6 运行而构建的遗留中间件。由于这些应用程序往往过于脆弱，无法迁移到 WildFly（JBoss 的继任者）的现代版本，组织选择将其"物理隔离"（air-gap）或隐藏在 VPN 之后，而不是对它们进行修补。当这些边界防御失效时，漏洞仍然存在——活跃且未修补。 JBoss AS 6.1.0 漏洞研究实验室 本仓库提供了一个容器化的 JBoss Application Server 6.1.0 环境，专门为安全研究和漏洞验证而配置。其设计目的是演示 Java 反序列化和 JBoss Seam EL 注入漏洞。 快速开...

CVE-2017-7504

HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server = Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via...