Deserialization Of Untrusted Data

OpenDJ Community Edition is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the JMX RMI connector reading and processing attacker-controlled serialized data before authentication, which allows an unauthenticated remote attacker to deserialize arbitrary Java objects on...