CVE-2013-6469

CVE-2013-6469 affects JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS. The vulnerability allows remote authenticated users to execute arbitrary Java code via an MVFLEX/MVEL expression, with network access and single authentication required (CVSS v2 base 6.5, Partial impacts). The explo...

JBoss Overlord Runtime Governance for JBossAS MVEL表达式Java代码执行漏洞

CVE ID:CVE-2013-6469 JBoss Overlord Runtime Governance for JBossAS是一款管理JBoss SOA平台的应用。 JBoss Overlord Runtime Governance for JBossAS处理部分MVEL表达式时存在未明错误，允许攻击者提交特制的表达式执行任意Java代码。 0 JBoss Overlord Runtime Governance for JBossAS 1.0 目前没有详细解决方案： https://www.jboss.org/overlord...