Red Hat JBoss Application Server Remote Code Execution Vulnerability
Red Hat · JBoss Application Server
Date added (CISA)
2021-12-10
Remediation due
2022-06-10
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.