Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:11033
HistoryJan 15, 2019 - 8:55 a.m.

Remote Code Execution Through Deserialization Attack

2019-01-1508:55:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

RichFaces is vulnerable to remote code execution through deserialization attacks. The ResourceBuilderImpl.java class in RichFaces does not restrict the classes which can be deserialized, allowing remote attackers to execute code.

Related

redhat 3
osv 1
nessus 3
jvn 1
seebug 1
hackerone 1
prion 2
github 1
ubuntucve 1
cvelist 2
cve 2
ibm 1
redhat
redhat
(RHSA-2013:1044) Critical: jboss-seam2 security update
2013-07-10 00:00:00
(RHSA-2013:1043) Critical: richfaces security update
2013-07-10 00:00:00
(RHSA-2013:1042) Critical: richfaces security update
2013-07-10 00:00:00
osv
osv
Remote code execution due to insecure deserialization
2022-05-13 01:27:59
nessus
nessus
RHEL 5 / 6 : richfaces in JBoss EWP (RHSA-2013:1043)
2014-06-28 00:00:00
RHEL 5 / 6 : richfaces (RHSA-2013:1042)
2013-07-11 00:00:00
RHEL 5 : jboss-seam2 (RHSA-2013:1044)
2013-07-11 00:00:00
jvn
jvn
JVN#38787103: JBoss RichFaces vulnerable to remote code execution
2013-07-19 00:00:00
seebug
seebug
JBoss RichFaces θΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž(CVE-2013-2165)
2013-07-17 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Remote Code Execution (RCE) in DoD Websites
2017-06-01 20:39:34
prion
prion
Deserialization of untrusted data
2013-07-23 11:03:00
Deserialization of untrusted data
2020-02-06 16:15:00
github
github
Remote code execution due to insecure deserialization
2022-05-13 01:27:59
ubuntucve
ubuntucve
CVE-2013-2165
2013-07-23 00:00:00
cvelist
cvelist
CVE-2013-2165
2013-07-22 19:00:00
CVE-2013-4521
2020-02-06 15:43:41
cve
cve
CVE-2013-2165
2013-07-23 11:03:00
CVE-2013-4521
2020-02-06 16:15:00
ibm
ibm
Security Bulletin: IBM Security Verify Governance is vulnerable to remote attacks to execute arbitrary code on the system [CVE-2013-4521, CVE-2013-2165 and CVE-2018-14667]
2023-04-13 10:18:40

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:11033
redhat3osv1nessus3jvn1seebug1hackerone1prion2github1ubuntucve1cvelist2cve2ibm1