Red Hat JBoss Enterprise Application Platform Remoting Unified Invoker command execution

Added: 07/18/2022 Background Red Hat JBoss Enterprise Application Platform is an open source platform for highly transactional, web-scale Java applications. Problem A remote, unauthenticated attacker can execute arbitary commands on the server by sending a specially crafted serialized object to t...

JBOSS EAP/AS Remoting Unified Invoker RCE

An unauthenticated attacker with network access to the JBOSS EAP/AS use exploit/multi/misc/jboss/remotingunifiedinvokerrce msf undefinedremotingunifiedinvokerrce show actions ...actions... msf undefinedremotingunifiedinvokerrce set ACTION msf undefinedremotingunifiedinvokerrce show options ...sho...