The vulnerability of the EjbObjectInputStream class in the Apache TomEE application server allows a hacker to execute arbitrary code.

The vulnerability of the EjbObjectInputStream class in the Apache TomEE application server is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created transformed object...